1.What cookies and local storage are
Cookies are small files a website saves in your browser, which the browser sends back with every request. Local storage (localStorage) is a similar space in the browser, read only by the website’s code and not sent to the server automatically.
2.Consent and Cookie settings
On your first visit we show a banner: you can accept the "Statistics" category, reject it or choose in "Settings". Strictly necessary cookies (sign-in, security, your cookie choice) need no consent under Art. 4(5) of Romanian Law 506/2004, which transposes Directive 2002/58/EC.
Without consent our statistics run without cookies and without storing anything on your device (pages, clicks, searches, approximate location and, if you are signed in, the link to your account; details in the Privacy Policy). If you reject "Statistics" or your browser sends Global Privacy Control or Do Not Track, statistics are limited to anonymous counts (pages, time, errors), without the IP address and without an identifier.
wm.vid cookie, the recorded replays and the browser identifier, and stops replays.3.The cookies we use
All are first-party cookies (set by wingo-marine.com). The sign-in cookies are HttpOnly (scripts cannot read them), Secure (HTTPS only) and SameSite=Lax.
__Secure-better- auth. session_token - Purpose
- Keeps you signed in: a signed session token tied to the session in our database
- Lifetime
- 30 days with “Remember me” (default); otherwise until you close the browser
- Type
- Strictly necessary
__Secure-better- auth. dont_remember - Purpose
- Marks a session for which you did not tick “Remember me”
- Lifetime
- Until you close the browser
- Type
- Strictly necessary
__Secure-better- auth. state - Purpose
- Protects Google sign-in against request forgery (CSRF)
- Lifetime
- 5 minutes, only during Google sign-in
- Type
- Strictly necessary
ais-,shell- collapsed ais-shell-width- Purpose
- Remember whether you collapsed or resized the app sidebar (signed-in app only)
- Lifetime
- 1 year, set only when you change the layout
- Type
- Preference (functional)
wm.consent- Purpose
- Remembers your cookie choice (accepted categories, date, policy version)
- Lifetime
- 6 months
- Type
- Strictly necessary
wm.vid- Purpose
- Recognizes your browser across visits for our statistics (first-party, HttpOnly, never shared)
- Lifetime
- 13 months, not renewed; only with your consent
- Type
- Statistics (consent)
4.Local storage (localStorage)
These keys stay in your browser only; we do not send them to the server and they contain no identifying data.
ais-theme- Purpose
- Your theme (light or dark), on the site, in the app and in the directory
- Lifetime
- Until you clear it
ais.locale- Purpose
- Your language (Romanian or English)
- Lifetime
- Until you clear it
ais-auth-hint- Purpose
- A flag that this browser had an active session (value “1”), so the page does not flash the visitor version
- Lifetime
- Removed when you sign out
wm-plan-intent- Purpose
- The plan picked on the pricing page before signing up, so Billing opens after your first sign-in
- Lifetime
- Removed once used
wm-track-mmsi- Purpose
- The vessel (MMSI) you started signing up from, so the map opens on it
- Lifetime
- Removed once used
wm-ship- search:recent - Purpose
- Your recent ship searches, shown only to you, on this device
- Lifetime
- Until you clear it
ais-sidebar-open- Purpose
- The menu groups you opened in the app
- Lifetime
- Until you clear it
wm.off- Purpose
- Turns our statistics off on this device (set with
?wm=off, removed with?wm=on) - Lifetime
- Until you delete it
ais.domainNotice. dismissed - Purpose
- Remembers that you closed the notice about the site’s new address
- Lifetime
- Until you clear it
In sessionStorage (deleted when the tab closes) we keep only ais.locale.chosen, which remembers that you explicitly chose the language in this tab, ais., the draft of a reply to a support ticket you have not sent yet (removed once you send it), and ais.next.hash, the part after “#” of a link you opened before signing in, so we take you exactly there once you are signed in (removed once used).
5.Traffic statistics
Our default statistics use no cookies or local storage: visits are grouped on the server with a key that changes every day. With your consent ("Statistics") we set the wm.vid cookie and may record a masked replay of some visits. Details in the Privacy Policy.
We also use Umami, hosted on a server run by Freevox (analytics.wingo.ro), with no cookies, no local storage and without keeping the IP address. We do not load it after "Reject all" or with Global Privacy Control / Do Not Track.
6.Third-party services
- Stripe — to pay you are redirected to checkout.stripe.com, and the billing portal is billing.stripe.com. There Stripe sets its own cookies, needed for payment and fraud prevention, under Stripe’s policy. We load no Stripe scripts on wingo-marine.com.
- Google — if you choose Google sign-in, Google’s policy applies on accounts.google.com.
- Maps and libraries — map tiles (tile.openstreetmap.org in the app, tiles.openfreemap.org in the directory) and the MapLibre library (unpkg.com) are downloaded directly by your browser. We set no cookies through them, but these providers receive your IP address and user agent, as with any web request.
7.How to control cookies
The simplest way: "Cookie settings" in the footer of every page, or the button below.
You can view and delete cookies and local storage in your browser settings (usually “Privacy” or “Site data”). Deleting the session cookie signs you out; blocking cookies for wingo-marine.com means you cannot sign in. Clearing local storage only resets your preferences (theme, language).
8.Changes and contact
We update this page when the cookies we use change; the date of the last update is shown at the top. Questions: office@freevox.ro. For personal data, see the Privacy Policy.
This policy is available in Romanian and English; if they differ, the Romanian version prevails.