Draft, pending legal review

Cookie policy

This site sets two first-party cookies, and only in the cases below. It does not set an analytics or advertising cookie.

No consent banner

A consent banner is not shown. The sign-in cookie is strictly necessary for a session you asked for by logging in. The other cookie is written only after you click Hide story, and it stores that one choice. No non-essential script loads on the page. If we add a non-essential cookie or script later, it will not run until you consent, and this page will change.

Sign-in session

This is the sign-in session. The dashboard will not open without it. This site sets it after a successful sign-in and clears it when you sign out. The name is __Host-wm_session on the production host. On any other environment the name is __Host-wm_session_ plus that environment, for example __Host-wm_session_uat. It is HttpOnly, SameSite=Lax, and path /. It expires after 8 hours or when you sign out. The server also rejects a session that is no longer valid. It is marked Secure. It has no Domain attribute. It is not a tracking id. The public pages do not set it. Sign-out also clears an older cookie named wallet_hub_token on .walletmeinc.com. That older cookie is not read.

walletme_story_welcome

The company-admin home can show a short story. Hide story writes walletme_story_welcome=seen so the story stays hidden on a later visit. The cookie is first-party, SameSite=Lax, Secure, path /, and it expires after one year. It is not HttpOnly. It is not set when you only read the public site, and it is not set until you click the button. The value is the word “seen”. It is not shared.

Storage and other people’s cookies

The site does not write localStorage or sessionStorage. It does not load Google Analytics, an ad pixel, a tag manager, or a font from Google’s servers. Type is delivered by this site. A browser check of the public pages and of a signed-in dashboard found no third-party host.

Do Not Track

We do not track you across other sites, so a Do Not Track signal does not switch a tracker off. The privacy policy says the same thing.

How to clear them

Sign out to end the session cookie. Use your browser’s cookie settings to remove either cookie. Blocking all cookies means sign-in and Hide story cannot be remembered.

Contact

Questions go to hello at walletmeinc dot com. This page is a draft dated 23 October 2026, pending legal review.