Skip to main content
Legal

Cookie policy

Last updated: October 22, 2026

1. What are cookies?

Cookies are small text files a site stores on your device to remember things — like whether you are signed in — between visits.

2. Cookies we use

Wishmark uses a small number of first-party cookies. We do not use advertising cookies or cross-site tracking cookies of any kind.

Necessary

Always active

Required for the service to function; cannot be turned off while using the app.

  • authjs.session-token — keeps you signed in. Expires after 30 days.
  • authjs.csrf-token — prevents cross-site request forgery on sign-in and sign-out.
  • authjs.callback-url — remembers which page to return you to after you sign in.

Settings

Can be disabled

Stored in your browser's localStorage, never sent to our servers. Disabling them may bring back onboarding or reset your theme.

  • theme — your color theme (light / dark / system).
  • ww-onboarding-complete — remembers you dismissed the welcome walkthrough.
  • ww-cookie-consent — records your acknowledgement of this notice, with a timestamp.
  • accessibility-settings — your accessibility choices, if you change any.
  • ww-try-list — the names you try out on the home page before you sign up.
  • ww-share-* — one for each shared wishlist where you tapped I'll get this, so you can undo it.
  • ww-signed-out — notes that you signed yourself out, so we don't tell you your session expired.
  • reported-errors — a short list of recent app errors on your device, kept so you can send them with feedback.

Analytics

No cookies

We count how the app is used with our own analytics, which runs on our own server. It sets no cookies and saves nothing in your browser: it keeps a temporary ID in memory that is gone when you close or reload the page. It records pages viewed (with search words and private link parts removed) and how long they stay open, and actions like adding a person, tapping a shop link or using a form (never what you typed). When you are signed in it uses your account number, never your name or email. Tracking in your browser stays off if it sends Do Not Track. See our Privacy policy for the full list.

Marketing

None

We do not use marketing or advertising cookies. We do not sell your data or run ad campaigns.

We use one acknowledgement banner rather than per-category toggles: necessary cookies cannot be disabled, and the settings we save in your browser never leave it.

3. How to control cookies

  • Browser settings: View, block, or delete cookies. Blocking necessary cookies will sign you out.
  • Clear localStorage: Delete the ww-* keys in your browser's dev tools (Application > Local Storage) to reset your settings.
  • Our consent banner: Reappears if you clear your browser storage.

4. Contact us

Questions about this cookie policy? Email support@getwishmark.com. For broader privacy questions, see our Privacy policy.