Cookie Policy

Last updated: 2026-08-15

This page explains exactly which cookies whimsy.cards uses, why, and how you can manage them.

What are cookies?

A cookie is a small file made up of letters and numbers that is stored on your computer, mobile terminal, or other internet-enabled device. The cookie is installed in response to a request made by your terminal to the whimsy.cards servers or third-party servers.

What are cookies used for?

We use strictly necessary cookies for authentication and language preference. With your consent, sessionStorage holds a temporary analytics identifier used to produce usage statistics. Your analytics choice is saved in localStorage. We do not use these technologies for behavioural advertising.

Cookies we use

Cookie	Purpose	Expiry	Type	Consent required
`sb-*-auth-token`	Keeps you signed in. Without this cookie the app cannot verify your identity.	400 days	Essential	No
`NEXT_LOCALE`	Remembers your chosen display language (English, Romanian, or Hungarian).	365 days	Functional	No
`cookie-consent`	A localStorage key (not a cookie) that stores your optional analytics choice.	Until cleared in the browser; consent is requested again after 12 months	Essential	No — needed to remember your choice
`analytics_session_id` `analytics_session_last_seen`	sessionStorage keys used only after consent to group analytics events into one session.	When the browser session closes	Analytics	Yes

Do cookies contain personal data?

Cookies and browser storage may contain identifiers that are personal data or become personal data when combined with other information. Authentication tokens are protected by technical measures, but no measure guarantees absolute security.

No behavioural advertising

We do not use Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, or advertising networks. Our optional analytics runs only after consent. Integrated services such as Stripe, Google/Meta Login, Google Maps or Google Fonts may receive technical data when you use the relevant feature and may apply their own technologies under their policies.

Blocking cookies

If you choose to block cookies, some site functionalities will be disabled and this may cause issues when using our platform. For example, blocking cookies may prevent you from:

Most browsers are set by default to accept cookies, but you can modify these settings to block some or all cookies.

Logging into your account;
Using the platform's features correctly.

How to manage cookies

You can delete or block cookies from your browser settings at any time. See the browser-specific instructions below:

Chrome: Settings → Privacy and security → Cookies
Firefox: Options → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Cookies and site permissions

Why are cookies important for the Internet?

Cookies are a central element of the efficient functioning of the Internet, helping to generate a user-friendly browsing experience adapted to each user's preferences. Refusing or disabling cookies can make some sites or parts of sites impossible to use.

Examples of important cookie uses:

Content and services adapted to user preferences;
Retaining language settings and browsing preferences;
Maintaining the authentication session;
Anonymous statistics for service improvement;
Measuring and optimising user experience.

Security and privacy

Tips for safe cookie usage:

Customise your browser settings to reflect a comfortable level of cookie security;
If you are the only person using the device, you may set longer expiry times for browsing history and access data;
If you share device access with others, consider setting your browser to delete individual browsing data each time you close the session;
Change your whimsy.cards account password periodically.

Legal basis

Strictly necessary cookies and local storage use the exemption for storage/access indispensable to the service you requested, so consent is not required. Optional analytics requires prior consent. Where identifiers are personal data, analytics relies on consent, while security and strictly operational telemetry rely on legitimate interests.