This Cookie Policy explains what cookies and similar storage technologies WayGenie (NextEraPro Ltd.) uses on the marketing site (https://waygenie.app) and the web app (https://web.waygenie.app), what they do, and how you control them. For the broader explanation of how we handle personal data, see the Privacy Policy.
1. What Are Cookies and Similar Technologies?
A cookie is a small text file that a website stores in your browser. Local storage and session storage are similar mechanisms with longer-lived or per-tab scope. We use the word "cookie" loosely in this policy to cover all three.
Cookies set by waygenie.app or web.waygenie.app are "first-party". Cookies set by other domains loaded into our pages (Stripe, Clerk, Google Analytics, Mixpanel) are "third-party".
2. Categories We Use
3. The Full Cookie List
3.1 Strictly Necessary
| Cookie / storage key | Set by | Purpose | Lifetime |
|---|---|---|---|
| __session | Clerk | Keeps you signed in. | Session |
| __clerk_db_jwt, __clerk_* | Clerk | Authentication state, CSRF protection. | Up to 1 year |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention during checkout. Set only on the billing/checkout flow. | 1 year / 30 min |
| m, cid | Stripe | Stripe payment-page session state. Set only during checkout. | 2 years / Session |
| waygenie_consent_v1 | WayGenie | Stores your cookie-banner choice. | 12 months |
3.2 Functional (localStorage / sessionStorage)
| Storage key | Set by | Purpose | Lifetime |
|---|---|---|---|
| theme | WayGenie | Remembers your light/dark theme choice. | Until cleared |
| sidebar:state | WayGenie | Remembers whether your sidebar is collapsed or expanded. | Until cleared |
| onboarding-checklist:dismissed | WayGenie | Remembers that you have dismissed the onboarding checklist. | Until cleared |
These are stored in your browser's localStorage. They do not leave your device and are not personal data we receive on the server. They are used solely to improve your UI experience and are never used for tracking or backend user identification.
3.3 Analytics & Performance: Consent Required
| Cookie / storage key | Set by | Purpose | Lifetime |
|---|---|---|---|
| mp_<token>_mixpanel | Mixpanel | Distinguishes your browser for product analytics. | 1 year |
| mp_session_*, mp_replay_* | Mixpanel | Session replay storage. Records mouse movement, clicks, scrolls, and (with input masking) form input. Sampled at 25% of sessions. | Session / 1 year |
| _ga | Google Analytics 4 | Distinguishes your browser. | 2 years |
| _ga_<container-id> | Google Analytics 4 | Per-property session state. | 2 years |
| _gid | Google Analytics 4 | Distinguishes your browser (legacy). | 24 hours |
| _gat | Google Analytics 4 | Throttles request rate. | 1 minute |
These are loaded only after you accept "Analytics" in the cookie banner. If you decline, the analytics scripts are not added to the page at all: no _ga, no Mixpanel, no session replay.
4. Mixpanel Session Replay: What It Actually Records
If you accept analytics cookies, we record a sample of your sessions for product research. A "session replay" is a reconstruction of what your browser displayed and what you did during the session: mouse movement, clicks, scrolls, page transitions, and (where not masked) form input.
We apply Mixpanel's input-masking to all user-typed text fields by default. Only structural interactions such as clicks, scrolls, and page transitions are recorded. All text that you type into any input or textarea element appears as *** in the replay, with no exceptions.
Sample rate: 25% of sessions. We periodically tune this; the current value is shown in the cookie-banner settings page.
You can:
- decline analytics cookies entirely (no replays at all); or
- accept analytics but ask us to delete an existing replay by emailing team@waygenie.app with a rough timestamp.
5. The Cross-Subdomain Consent Cookie
The waygenie_consent_v1 cookie is scoped to .waygenie.app. This means your cookie choice on the marketing site is shared with the web app, and vice versa. If you decline analytics on waygenie.app, you will not see an analytics prompt again when you sign in at web.waygenie.app, and your decline will be respected on both domains.
6. Managing Your Choice
You can change or withdraw your cookie consent at any time from the Cookie settings link in the footer of either site, or by clearing the waygenie_consent_v1 cookie in your browser.
You can also block or delete cookies using your browser's settings. If you block strictly necessary cookies, sign-in and payments will not work.
7. "Do Not Track" and the Global Privacy Control Signal
We treat the Global Privacy Control (GPC) signal sent by your browser as a request to decline analytics cookies. If your browser sends GPC and you have not yet made an explicit choice in our banner, we will not load analytics until you change that choice.
We do not currently action the legacy "Do Not Track" header, which has been deprecated by major browsers.
8. Changes to This Policy
We will update this page when we add, remove, or materially change a cookie. The "Last updated" date will reflect the change. For material additions to the analytics category, we will re-prompt you for consent rather than relying on your previous choice. In any event, your consent will be refreshed every 12 months and you will be asked to confirm your preferences again.
9. Contact
NextEraPro Ltd.
Email: team@waygenie.app