Cookie Policy
Which cookies and browser storage IWQR uses on iwqr.org and in the customer dashboard, why, for how long, and how you change your choice.
Last updated 2026-10-2901Cookies and browser storage
A cookie is a small text file that a website stores in your browser and receives back with later requests. Browser storage (local and tab storage) works similarly but stays in your browser and is not sent to the server by itself.
We group everything we store into four categories: strictly necessary, preferences, security and statistics. Only statistics is optional; the other three are needed for the site to work or are written only when you ask for something.
02Strictly necessary
iwqr-session (cookie, first party): keeps you signed in, stores your language and the security token that protects forms against forged requests. It expires after 180 days of inactivity or when you sign out.
iwqr-consent (cookie, first party): remembers your cookie choice for 12 months. When you are signed in, the same choice is also saved on your account, so the dashboard asks you only once.
iwqr-veil, iwqr-panel-nav and iwqr-submitted (tab storage): let the page-turn animation and the confirmation sound continue on the next page. They are deleted when you close the tab.
These items are exempt from consent because the service you request cannot be provided without them (Art. 5(3) ePrivacy Directive; § 25(2) TDDDG).
03Preferences
flux.appearance stores light, dark or system appearance; iwqr-sound stores whether sounds are on; iwqr-promo-closed and iwqr-ticket-tip remember the offer bar and support tips you closed. All of them live in your browser's local storage, are written only after you make that choice and are never sent to us.
Browser alerts: if you turn them on in the bell menu, your browser grants a notification permission and we store the push subscription it creates on our server until you turn alerts off.
04Security (Cloudflare)
The website is protected by Cloudflare, Inc. When Cloudflare checks a connection against attacks or bots, it may set __cf_bm or cf_clearance. These cookies contain no profile, are used only for security and usually expire after about 30 minutes.
05Statistics
When you arrive through a link with campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), we record the campaign, the landing page, the referring site, the device type and a hashed reference to the session. No cookie is set for this, no IP address is stored and nothing is shared with advertising networks.
If you sign in or register in the same session, the record is linked to your account, so we can see which campaigns bring customers. Records are deleted after 12 months.
Statistics is on unless you switch it off. Choose "Necessary only" or turn the switch off in the cookie settings and no further visits are recorded.
06What we do not use
No advertising or retargeting cookies, no Google Analytics or similar tools, no social-media plugins, no fingerprinting and no sale of data.
Image delivery addresses of our CDN set no cookies of ours, and our WordPress plugin sets no cookies in your visitors' browsers.
07Other providers
Google and GitHub (sign-in) and YekPay (card payments) set their own cookies only on their own pages, when you choose to go there. Their privacy policies apply to those cookies.
08Changing your choice
Open the cookie settings with the small cookie button in the bottom left corner of every page. You can change or withdraw your choice at any time; it applies from then on.
You can also delete cookies and site data in your browser settings. If you delete the strictly necessary cookies you will be signed out.
09Changes & contact
If we add a new kind of cookie, we update this page and ask for your choice again. Questions about cookies: support [at] iwqr [dot] org or the contact page.
