Our cookie policy.

A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. The regulations more broadly cover all trackers: any information that a website reads or stores on your device, including in your browser's local storage.

This policy explains what the Winaity website stores on your device, why, and how to delete it.

The website uses no advertising or social media trackers, and measures its audience only with your consent. It stores the following cookies and data on your device, and nothing else:

Signing in to your Winaity account

These cookies are only set when you sign in to your client area.

Session

Cookie __Host-winaity-compte: keeps you signed in. It is encrypted and scripts on the page cannot read it (httpOnly). Duration: 8 hours at most, deleted when you sign out.

Display first name

Cookie winaity-qui: your first name, to show in the header once you are signed in. Duration: 8 hours at most, deleted when you sign out.

Sign-in in progress

Cookie winaity-compte-tx, followed by a dot and eight characters: protects the sign-in while it is being completed. Duration: 30 minutes at most, deleted when the sign-in is finished.

New attempt

Cookie winaity-compte-relance: stops a failing sign-in from being retried in a loop. Duration: 60 seconds.

Identification service

The identification service at auth.winaity.com, where you enter your credentials, sets its own technical session cookies, which it needs to work. They are used only for signing in.

Your browser's local storage

Cart

Key winaity-panier: the plans you add to the cart on the Pricing page, so you find them on your next visit. Duration: until you empty the cart or delete the website's data.

Guides and pop-ups

Key winaity-visiteur: the email address you gave us to receive a guide, the tools you looked at or are interested in, and the offers already shown (so as not to repeat them). It only leaves your browser if you send a form. Duration: until you delete the website's data.

Promotion banner

Key winaity-promo-fermee, in session storage: remembers that you closed the banner, until you close the tab.

The cart stays in your browser and is not sent to any third party. The content of the cart is sent to Winaity only when you place an order.

Payment page

On the payment page only, the form is provided by Stripe (Stripe Payments Europe, Ltd), our payment provider, whose script is loaded from js.stripe.com. Stripe uses its own cookies and local storage there, which are needed to secure the payment and prevent fraud. Their names and durations are set by Stripe: see its privacy policy.

Audience measurement, with your consent

Google Analytics

Cookies _ga and _ga_ followed by the website's measurement ID: tell visits apart to count the audience (pages viewed, origin, type of device), without advertising or personalisation. Set by Google Ireland Limited only if you accept, through Google Tag Manager, which also counts contact form submissions (type of request and tools ticked, never your contact details), account creations and confirmed purchases (reference, plan, amount), and tells signed-in customers from other visitors. Duration: 13 months at most.

Your choice

winaity-consentement key in local storage: remembers your choice on the cookie banner for 6 months; after that, the banner asks you again. It is never sent to our servers.

Winaity Connect application (connect.winaity.com)

The Winaity Connect application sets its own cookies, all necessary for it to work:

Sign-in

Cookies __Host-authjs.csrf-token and __Secure-authjs.callback-url (until the browser is closed), __Secure-authjs.state, __Secure-authjs.pkce.code_verifier, __Secure-winaity.oidc.state and __Secure-winaity.oidc.pkce (2 hours): protect the sign-in and remember the page to return to.

Identification service

The auth.connect.winaity.com sign-in page sets its own technical cookies (Keycloak), needed to identify you.

Application

the sign-in session (30 days), the chosen organisation (1 year), the menu state (7 days), test mode if enabled (winaity-test-world cookie, until the browser is closed) and, when an organisation is created, acceptance of the terms of sale (cgv-pending cookie, 10 minutes).

Payment

on the subscription and billing pages, Stripe, our payment provider, sets its own fraud-prevention cookies; their names and durations are set by Stripe.

Information banner

winaity-consent key in local storage: remembers that you closed the banner announcing these cookies; it is never sent to our servers.

The sign-in cookies, the cart and payment are strictly necessary: they provide the service you ask for. They are therefore exempt from consent under Article 82 of the French Data Protection Act (loi Informatique et Libertés) and the CNIL guidelines.

Audience measurement (Google Analytics, loaded by Google Tag Manager) is only set with your consent, given on the banner shown on your first visit: "Reject all" is as easy as "Accept all", and without a choice from you nothing is set. Your choice is kept for 6 months. You can change it at any time with "Manage cookies", at the bottom of every page; withdrawing your consent deletes the Google Analytics cookies.

The Winaity Connect application shows an information banner about its cookies: like the website's, they are all necessary and do not require your consent.

You can empty your cart from the Pricing page and sign out from your client area, which deletes the sign-in cookies. To delete everything, clear the cookies and the website's data in your browser settings.

You can also set your browser to block cookies and local storage: the website remains available, in its default light theme, but you will no longer be able to keep your cart, sign in to your account or pay online.

For any question about this cookie policy, you can write to us at contact@winaity.com. The processing of personal data is described in our Privacy policy.