Cookie Policy
The cookies Webift uses on its own website, what each one does, how long it lasts, and how to change your choice.
This policy applies to webift.com and www.webift.com: the Webift website, the blog, and the sign-up and sign-in pages. It does not cover the tracking a merchant chooses to add to their own store, such as the merchant's own advertising pixel: each merchant is responsible for that and for their store's own cookie notice. When Webift's platform serves a store, it sets the same two necessary cookies listed below (webift-session and XSRF-TOKEN) and none of Webift's analytics or marketing cookies.
1. What cookies are
Cookies are small text files stored in your browser. We set our own cookies on webift.com. If you accept, Google Analytics and Meta also set their own, as listed below.
2. The cookies we use
Necessary (always on)
| Name | What it does | Lifetime |
|---|---|---|
wb_consent | Remembers whether you accepted or rejected | 180 days |
webift-session | Keeps your visit secure (session identifier) | About 2 hours |
XSRF-TOKEN | Protects forms and requests against forgery | About 2 hours |
Analytics (only after you accept)
| Name | What it does | Lifetime |
|---|---|---|
wb_vid | A random visitor ID (it contains no name, email or IP address), so we can count visitors and connect a visit to a later sign-up | 395 days |
wb_attr | Remembers how you first reached Webift (the page, the referring website, campaign tags such as utm_source) | 90 days |
_ga, _ga_<ID> | Set by Google Analytics 4: visitor and session identifiers | Set by Google; up to 2 years |
Marketing measurement (only after you accept)
| Name | What it does | Lifetime |
|---|---|---|
_fbp (and _fbc if you arrive from a Facebook or Instagram ad) | Set by Meta's measurement pixel on our home page and sign-up page, so Meta can measure how Webift's marketing performs | Set by Meta; typically 90 days |
Our own cookies are set only for the address you are visiting (webift.com or www.webift.com). The analytics cookies are marked Secure and SameSite=Lax.
3. Optional tracking stays off until you choose
On your first visit a banner offers Accept and Reject, equally prominent. We use the necessary cookies above to operate Webift whatever you choose. Until you accept, we store no analytics or marketing cookie, Google's analytics script is not downloaded, and Meta's pixel is not loaded. If you reject when the banner first appears, they are never loaded, so nothing is set or sent. A few files from other providers still load either way (section 5).
4. Google and Meta settings
- Google Analytics: runs only after you accept. We keep Google signals, ad personalisation and ad storage off, and we have switched off the optional sharing of our Analytics data with other Google products. Google Analytics keeps event data for 14 months.
- Meta: the pixel is blocked until you accept, and it runs only on our home page and sign-up page. If you later reject or withdraw, we stop it and delete Meta's cookies from your browser.
- We use no other advertising or retargeting cookies on webift.com.
5. Files loaded from other companies regardless of your choice
Whatever you choose, loading our pages makes your browser fetch a few files from other providers, which therefore receive your IP address and browser details: fonts from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), page-rendering files for our sign-up and sign-in screens from Google (gstatic.com), and blog images from our Cloudflare storage. These requests set no cookie that identifies you to us.
6. Change your choice at any time
Use Cookie settings in the footer of any page and choose Accept or Reject. If you have already accepted and then change your mind, withdrawing is different from rejecting at the start: Google's and Meta's scripts have already run, so the data they collected while you had accepted has already been sent. Withdrawing switches those scripts off in the page you are viewing so they send nothing more (they are not loaded again on later pages), deletes wb_vid, wb_attr, Google's _ga cookies and Meta's _fbp/_fbc from your browser, asks us to delete the analytics events linked to your visitor ID, and removes the link to your account. Events your browser already sent to Google or Meta while you had accepted cannot be recalled by us (see our Privacy Policy). You can also block or delete cookies in your browser settings; the website still works. Rejecting never limits your use of Webift.
7. What analytics tells us
Which pages and blog posts are read, which websites or search engines send visitors, how many visits lead to a sign-up, and how our marketing performs. We do not send your name, email address, phone number or store details to Google. See our Privacy Policy for the full detail.
8. Changes and contact
We will update this page if our cookies change. Questions: info@webift.com.
Brain and Cash Tech Limited, No 03, Peace Avenue.