1. What are cookies?

Cookies are small text files that a website stores on your device when you visit. They help the site remember things about your visit, such as whether you are logged in or what language you prefer.

We also use localStorage, a similar browser technology that stores data on your device but is never sent to our servers automatically. Both cookies and localStorage items are listed below.

---

2. What we use and why

Essential cookies (strictly necessary)

These cookies are required for Wendy to function. Without them, you cannot sign in or stay logged in. They cannot be disabled without breaking the Service.

Name	Type	Purpose	Duration	Provider
wendy_session	Cookie (HttpOnly, Secure)	Stores your authenticated session token so you stay signed in	Session (expires when you sign out or the session expires)	Wendy / Supabase
wendy_refresh	Cookie (HttpOnly, Secure)	Stores a refresh token to renew your session without you having to sign in again	Up to 30 days	Wendy / Supabase

Both session cookies are marked HttpOnly (they cannot be accessed by JavaScript, protecting against cross-site scripting attacks) and Secure (they are only transmitted over HTTPS).

Preference storage (localStorage)

These items are stored in your browser's localStorage. They are never sent to our servers and stay entirely on your device.

Name	Purpose	Duration
wendy_theme	Stores your preferred colour scheme (light or dark mode)	Until you clear browser storage or change your preference
wendy_language	Stores your preferred interface language	Until you clear browser storage or change your preference
wendy_pkce_verifier	Temporarily stores the PKCE code verifier during Google sign-in. Cleared immediately after authentication completes.	Cleared on sign-in completion (typically under 5 minutes)
wendy_ref	Temporarily stores a referral code if you arrived via a referral link, so it can be attributed after sign-up	Cleared on sign-up completion

What we do not use

• Advertising cookies or tracking pixels
• Third-party analytics cookies (we do not use Google Analytics, Facebook Pixel, or similar services)
• Cross-site tracking cookies
• Cookies that build a profile of your browsing behaviour outside of Wendy
• Fingerprinting or other covert tracking techniques

---

3. How long do cookies last?

Session cookies are deleted when you close your browser or sign out. Persistent cookies (like wendy_refresh) remain until their expiry date or until you delete them. localStorage items remain until you clear your browser's storage or use a browser control to remove them.

---

4. How to manage and delete cookies

You can control cookies through your browser settings. Note that disabling essential cookies will prevent you from signing in to Wendy.

For other browsers, search "[your browser name] manage cookies" for the most up-to-date instructions.

---

5. Do Not Track

Some browsers send a "Do Not Track" (DNT) signal to websites. Because Wendy does not track you across other websites and does not use third-party advertising or analytics cookies, our behaviour is consistent whether or not DNT is enabled. We respect the spirit of DNT.

---

6. Changes to this policy

We may update this Cookie Policy when we add new features or change our technology. We will update the "Last updated" date at the top of this page when changes are made. Material changes will be communicated via the app or email if you have an account.

---

7. Contact

For any questions about our use of cookies, email hello@meetwendy.co.uk.

Company: Meet Wendy LTD, a company registered in England and Wales (company number 17178110). Registered office: MEET WENDY LTD, Unit 168041, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, UK. Contact: hello@meetwendy.co.uk.