Weave only uses cookies that are strictly necessary for the service to work. No advertising cookie, no third-party tracker, no fingerprinting.
We don't drop any cookie until you create an account. Once signed in, only a session cookie is set to keep you authenticated — that's it. We don't use any advertising tracking service, no Facebook pixel, no Google Analytics. Usage statistics are measured internally on anonymized and aggregated data, without any cookie being set.
Only two cookies are set by the application, both strictly necessary for authentication. No cookie is set before login. No third-party cookie, no advertising cookie, no social-media cookie, no third-party audience-measurement cookie.
| Name | Purpose | Duration | Type |
|---|---|---|---|
weave_token |
HS256-signed JWT access token used to authenticate your requests during your active session. HttpOnly, Secure, SameSite=Lax. |
1 hour | Strictly necessary |
weave_refresh |
Refresh token used to automatically renew your access token without asking you to log in again. Stored as a SHA-256 hash server-side. HttpOnly, Secure, SameSite=Lax. |
90 days | Strictly necessary |
CSRF (Cross-Site Request Forgery) protection relies on Origin header
verification and the SameSite flag on the cookies above, rather than on
a dedicated cookie.
In addition to cookies, the app uses your browser's localStorage to
remember preferences that are strictly local to your device. This
data is never sent to our servers and is not synchronized across your devices. Main
entries:
| Key | Purpose |
|---|---|
weave-locale-v1 |
Display-language preference (French or English). |
weave-theme-v1 |
Theme preference (light, dark, automatic). |
weave-stickies-* |
Position of sticky notes on the circle wall. |
You can clear localStorage at any time through your browser tools; this
simply resets your preferences without affecting your account.
You can refuse or delete cookies at any time through your browser settings. Note: disabling strictly necessary cookies prevents authentication and therefore usage of the application.
The data controller replies personally to any question about cookies and tracking: contact@schoenfg.com.