Cookies, localStorage and sessionStorage
A cookie is a small piece of text your browser keeps for a website and can send back with each request. localStorage is storage inside your browser that stays until you or the site delete it; sessionStorage works the same way but is emptied when you close the tab. Apart from the sign-in cookies below, our own cookie and storage entries stay in your browser and are not sent to us.
The language cookie: whf_lang
whf_lang is our only cookie that is set without signing in. It remembers the language of the site so you are not redirected or asked again, and it is kept for 12 months. On your first visit it is set from a guess based on your time zone and browser language; when you pick a language in the header menu, that choice overwrites it. Search engine crawlers do not receive it.
Sign-in cookies: whf_session and whf_oauth_nonce
When you sign in, we set whf_session: a random key that tells our server which account is signed in. It is sent only to webhostflow.eu, cannot be read by scripts on the page, and expires after 30 days without use or when you log out. While the Google or Apple sign-in window is open, whf_oauth_nonce holds a one-time value for up to 30 minutes so a sign-in cannot be replayed. Both are strictly necessary for the account you ask for, so the banner does not switch them off.
Storage entries in your browser
whf_cookie_consent (localStorage) stores your banner choice. whf_cart (localStorage) holds your cart. whf_user_hint (localStorage) remembers the email and name of the signed-in account so the header shows them at once; it is removed when you log out. The whf_data_v1:* entries (localStorage) hold the sample records of the shared demo account; records an account kept here before they moved to our server are uploaded on its next visit and then removed. whf_account_v1, left from the earlier browser-only accounts, is removed the first time you sign in. whf_last_order and whf_order_recorded (sessionStorage) keep your last checkout until the tab is closed. localStorage entries stay until you clear this site's data.
Analytics: Yandex.Metrika, only with consent
Only if you accept Analytics do we load the Yandex.Metrika counter from mc.yandex.ru. It records page views, clicks and, through Webvisor, anonymised replays of your session on the site. Metrika sets its own cookies whose names start with _ym_ (for example _ym_uid and _ym_d); some are kept for up to a year. The data is processed by Yandex, including outside the EU. Without your consent the counter is not loaded and no _ym_ cookies are set. The legal basis is your consent (Art. 6(1)(a) GDPR).
Analytics: Google Analytics, only with consent
With the same Analytics consent we also load Google Analytics 4 from www.googletagmanager.com. It records page views and basic information about your device and visit. It sets its own cookies _ga and _ga_TVME100CMV, kept for up to two years. The data is processed by Google, including outside the EU. Without your consent Google Analytics is not loaded and no _ga cookies are set. The legal basis is your consent (Art. 6(1)(a) GDPR).
Marketing
The banner offers a Marketing category, but the site currently uses no advertising or marketing tools, pixels or cookies, so accepting it changes nothing today. If we ever add such tools, we will update this policy first and they will run only with your Marketing consent.
Live chat: webchatix
The chat button in the corner of every page is provided by webchatix (webchatix.online). Its script loads on every page and sets the cookie wx_vid_scq1zmmv7pmthz2h2m8xqzoh, a random visitor ID kept for 12 months, so that an open conversation continues on the next page. If you write to us, the chat also stores the name, phone number and email address you enter in cookies of the same form (wx_name_…, wx_phone_…, wx_email_…) for 12 months, keeps the conversation ID in localStorage (rp_conv_…) and keeps its own consent setting in wx_gdpr_…. Messages and those details are sent to webchatix and reach us through it. The chat is a service you use at your request, so it is not switched off by the banner; if you do not want its cookies, delete them and do not use the chat.
Your choices in the banner
On your first visit a banner offers three options. Accept all enables Analytics and Marketing. Reject non-essential keeps only what is strictly necessary. Preferences lets you switch Analytics and Marketing on or off individually. Strictly necessary items are always active, because the site cannot work without them.
Changing your choice and browser controls
There is currently no settings link in the footer. To change or withdraw your choice, delete this site's data (cookies and site storage for webhostflow.eu) in your browser settings; the banner will then appear again. Note that this also empties your cart and the customer area. You can also block or delete cookies in your browser; if you block storage entirely, language memory and the cart will not work.
Services that receive your IP address without cookies
Some services set no cookies on our site but still receive your IP address when your browser contacts them: Google Fonts on every page, Cloudflare and Google Public DNS when you check a domain name, and Stripe when you go to its payment page. Details and legal bases are in our privacy policy.
Updates and contact
We update this policy whenever the cookies or storage we use change, and the date above shows the current version. Questions about cookies or your data: privacy@webhostflow.eu.