Cookie Policy

This Cookie Policy explains how Writ ("we", "us") uses cookies and similar technologies on our website and application. It should be read together with our Privacy Policy. We keep this simple: essential cookies keep you signed in and your session secure. Only if you opt in via our consent banner do we use privacy-first analytics to understand how the site is used. No advertising, no cross-site tracking, and we never sell your data.

What are cookies?

Cookies are small text files stored on your device by your browser. They are widely used to make websites work, to remember your sign-in state, and to keep your session secure.

Cookies we use

Strictly necessary

We use essential cookies for authentication and security, including an httpOnly refresh-token cookie that keeps you signed in and protects your session. These are required for the Service to function and cannot be disabled through our interface.

Functional

We store small amounts of data (for example, your selected language and onboarding progress) to remember your preferences. Some of this is kept in your browser's local storage rather than in cookies.

Analytics & measurement (optional, off until you opt in)

If you accept the "Analytics" category in our consent banner, we load privacy-first, cookieless analytics to measure traffic, see which pages and links are used, and record real page-performance (Core Web Vitals). These are off by default and never load until you opt in; declining keeps them disabled. We honor "Do Not Track" and Global Privacy Control signals as a decline.

• Umami: privacy-first, cookieless website analytics, self-hosted by us. No cross-site profiling.
• Web Vitals: anonymous page-performance and latency measurements (LCP, INP, CLS, TTFB).
• PostHog and Sentry: product analytics and error monitoring, used only when enabled for a deployment and configured cookieless with personal-data scrubbing.

Your consent choice and basic campaign attribution are stored in your browser's local storage under the keys writ:consent, writ:analytics and writ:utm, not in cookies, and never shared.

What we do not use

• We do not use third-party advertising cookies.
• We do not use cross-site tracking cookies.
• Our analytics are privacy-first and cookieless: they never profile you across other websites, and we never sell your data.

Third-party cookies

When you add funds to your wallet or make a payment, our payments partner (Stripe) may set cookies necessary to process the transaction securely and to prevent fraud. These are governed by Stripe's own cookie and privacy policies.

Managing your choices

You control optional analytics through our consent banner. Choose "Reject" to keep them off, or "Manage preferences" to toggle the Analytics category. You can reopen these settings at any time from the "Cookie preferences" link in the footer, and we re-ask when our policy materially changes. You can also control and delete cookies through your browser settings. Because our authentication cookies are strictly necessary, disabling them will prevent you from signing in and using the Service.

Local and BYO agents

When you run Writ through a local/BYO agent on your own machine, that agent does not rely on website cookies to operate. Cookies described here relate to the Writ web application and dashboard.

Changes to this policy

We may update this Cookie Policy from time to time. Material changes are posted here with an updated effective date and version.

Contact

Questions about cookies? Contact [email protected]. See all policies in the legal index.