1. What Are Cookies
Cookies are small text files stored in your browser when you visit a website. They let the site remember information about your visit — for example, that you are logged in, or your theme preference.
2. Cookies We Use
- Strictly necessary — required for the Service to function (login, security, fraud prevention). Examples:
whomi_session,csrf_token. Duration: session or 30 days. Cannot be disabled. - Preferences — remember your theme, language, dashboard layout. Examples:
whomi_theme,whomi_lang. Duration: 1 year. - Analytics — aggregate usage stats to improve the Service (first-party only). Duration: 90 days.
- Marketing — only set after explicit opt-in. Duration: up to 1 year.
3. Third-Party Cookies
We use a small number of third-party services that may set their own cookies:
- Stripe (payment processing) — sets cookies on the checkout page for fraud prevention
- GitHub (when you log in via GitHub OAuth) — sets cookies on
github.com, not on our domain
We do not use Google Analytics or any cross-site advertising cookies on whomi.bio.
4. How to Manage Cookies
- Browser settings — block or delete cookies. Blocking strictly-necessary cookies will break login.
- Cookie banner — shown on your first visit, lets you accept or reject non-essential categories.
- Withdraw consent — anytime via /dashboard → Account → Privacy.
For EU/EEA users, non-essential cookies are set only after you provide explicit consent.
5. Do Not Track
We honor "Do Not Track" (DNT) signals by disabling non-essential analytics for users whose browsers send DNT.
6. Contact
Questions about cookies: legal@whomi.bio.