Legal
Cookie Policy
- Version
- Version 1.7.0
- Date
- Effective date: September 21, 2026
Effective date: the date this version was published on this page.
1. What this Policy covers
This Policy explains the cookies and similar technologies used on wisetomorrow.com and in the WiseTomorrow application, which is operated by Dark Ecommerce Labs, LLC ("WiseTomorrow", "we", "us"). That includes the pages Trusted People use to request and open access. It supplements our Privacy Policy.
A cookie is a small text file a website stores in your browser. "Similar technologies" include browser storage and small data transmissions ("beacons") that record that a page was viewed or a button was clicked.
2. Summary
- We use first-party service and measurement cookies. We also use Meta Pixel on public shopping pages to measure and optimize Facebook and Instagram advertising. Google Ads, TikTok and Pinterest conversion tags load only after an opt-in where that choice is offered.
- First-party measurement and advertising measurement honor Do Not Track and Global Privacy Control: if your browser sends either signal, we measure nothing about your visit.
3. Cookies we use
3.1 Strictly necessary: authentication and security
These cookies are required for sign-in and security. The service does not work without them, so they cannot be switched off.
| Cookie | Purpose | Set by | Duration | Details |
|---|---|---|---|---|
| __Secure-authjs.session-token (on HTTPS; authjs.session-token otherwise) | Keeps an Owner signed in. Contains a signed, encrypted session token identifying your account | WiseTomorrow (first party) | Up to 30 days, refreshed while you use the service; you are signed out after a period of inactivity | HttpOnly, Secure, SameSite=Lax |
| __Host-authjs.csrf-token, __Secure-authjs.callback-url | Security and sign-in redirect handling used by our authentication library | WiseTomorrow | Session | HttpOnly, Secure, SameSite=Lax. May not be set in every sign-in flow |
| Access-request session cookie | Links the steps of an access request to the browser that confirmed the one-time code, so that no one else can continue the request | WiseTomorrow | Short-lived; ends when the request step it protects is complete or expires | HttpOnly, Secure, SameSite=Lax |
| ta-session | Keeps a Trusted Person signed in to the access view after they confirm a one-time code. It identifies the access grant they are viewing and records whether they accepted the access terms | WiseTomorrow | 24 hours | HttpOnly, Secure, SameSite=Lax |
| __Host-wt-admin | Keeps authorized WiseTomorrow staff signed in to internal tools. Not set for customers or Trusted People | WiseTomorrow | Up to 8 hours | HttpOnly, Secure, SameSite=Strict |
3.2 Preferences
| Cookie | Purpose | Set by | Duration | Details |
|---|---|---|---|---|
| wt_locale | Remembers your language choice (English or Spanish) | WiseTomorrow | 1 year | SameSite=Lax; Secure in production; readable by page scripts |
We treat this as a functional cookie that delivers the language you chose. It is not used for tracking.
3.3 Analytics and measurement
| Cookie or technology | Purpose | Set by | Duration | Details |
|---|---|---|---|---|
| wt_acquisition | Records how you first arrived at our site so we can understand which channels bring visitors. It stores: the source category (for example, "google", "referral", "direct"); the medium; whether a campaign tag was present; simple campaign-tag values; the landing page; device type; and the date. The full referring URL is not stored | WiseTomorrow | 30 days | SameSite=Lax. Not set if your browser sends Do Not Track or Global Privacy Control |
| First-party measurement events (beacons) | Record page views, button clicks, checklist and tool usage, and photo-capture feature performance (for example, how long an upload took). Events include the event name, device type, browser family and allowlisted properties. They do not include your name, email, account ID or the content of your Wise Box | WiseTomorrow, sent to and stored by WiseTomorrow | Not stored in your browser; kept by us for 12 months, then deleted | Not sent if your browser sends Do Not Track or Global Privacy Control |
3.4 Advertising measurement
Meta Pixel loads only on public shopping pages unless your browser sends Do Not Track or Global Privacy Control. We use it to measure page views, product views, checkout starts and verified purchases and to optimize Facebook and Instagram ads. We do not use advanced matching, send customer identity or load the Pixel in the private application. Where an opt-in control is available, Google Ads, TikTok and Pinterest tags do not load before you allow them.
| Cookie or technology | Purpose | Set by | Duration | Details |
|---|---|---|---|---|
| wt_ads_consent | Remembers your allow or reject choice | WiseTomorrow | 180 days | Functional preference; SameSite=Lax, Secure on HTTPS |
| _gcl_* cookies and Google Ads tag | Link an ad click to a purchase | Google tag on WiseTomorrow | Configured for up to 90 days | Only after opt-in; disabled by Do Not Track and Global Privacy Control |
| _ttp, ttcsid* and TikTok Pixel | Measure visits and purchases and optimize TikTok ads | TikTok tag on WiseTomorrow | Provider-controlled expiry; can be cleared in browser settings | Only after fresh opt-in; disabled by Do Not Track and Global Privacy Control | | _pin*, _epik, _derived_epik and Pinterest Tag | Measure visits, checkout activity and purchases and optimize Pinterest ads | Pinterest tag on WiseTomorrow | Provider-controlled expiry; can be cleared in browser settings | Only after fresh opt-in; disabled by Do Not Track and Global Privacy Control | | _fbp, _fbc and Meta Pixel | Measure public shopping-page visits, product views, checkout starts and verified purchases and optimize Facebook and Instagram ads | Meta tag on WiseTomorrow | Provider-controlled expiry; can be cleared in browser settings | Public shopping pages only; disabled by Do Not Track and Global Privacy Control; no advanced matching |
Advertising providers may receive the ad click identifier, public shopping-page address, product views and checkout activity, browser/network information (including IP address), and, on a verified purchase, its amount, currency and an opaque order reference. We do not send names, emails, payment card details, Stripe checkout identifiers, account details or stored Wise Box content. Google may process the data under its Privacy Policy. TikTok processes information under its Privacy Policy. Pinterest processes information under its Privacy Policy. Meta processes information under its Privacy Policy. Each provider's retention practices apply to data it receives.
Use Cookie choices on the public shopping pages to withdraw permission. This stops future advertising tag loading and clears accessible first-party Google, TikTok and Pinterest conversion cookies; it does not recall data already sent. Browser privacy controls may prevent attribution even after you allow measurement.
4. Third parties you may interact with
- Stripe checkout. When you buy a Wise Box or subscribe, you are taken to Stripe's hosted checkout page. Stripe may set its own cookies on its own domain to process payments and prevent fraud, under Stripe's privacy policy.
- Identity verification. When a requester verifies their identity, they are taken to the hosted page of our identity-verification provider, Stripe (Stripe Identity). Stripe may use its own cookies and device-fingerprinting technology for fraud prevention, under its own privacy notice.
- File storage. When you upload or view files, your browser connects directly to our cloud storage provider (Amazon S3) through short-lived secure links. That provider receives your IP address and browser information as part of the connection. It does not set tracking cookies for us.
5. Your choices
- Browser settings. You can block or delete cookies in your browser. Blocking strictly necessary cookies will prevent signing in and using the access process.
- Global Privacy Control and Do Not Track. If your browser sends either signal, we do not set the measurement cookie and do not send measurement events.
- Ad measurement. You can block or clear advertising cookies through your browser settings. Do Not Track and Global Privacy Control disable WiseTomorrow's advertising measurement for that browser. Where Cookie choices is available, it controls Google Ads, TikTok and Pinterest measurement.
- Language cookie. You can clear it; the site will then use the language saved in your account if you are signed in, and English otherwise.
6. Changes
We will update this Policy, and its effective date, before adding any new category of cookie or tracking technology. We will ask for your consent before using any non-essential cookies where the law requires it.
7. Contact
support@wisetomorrow.com · Dark Ecommerce Labs, LLC, 826 Hampton Wood Ct, Sarasota, FL 34232