Cookie Notice
What Wavn stores on your device, why, for how long, and how you control it. We set only cookies that are strictly necessary or that hold a display preference you chose. One of them is readable across our own two domains so that signing in once is enough; it carries no identifier. We run no advertising, no cross-site trackers and no behavioural analytics.
- Instrument
- Cookie Notice
- Version
- 2.1
- Effective
- 3 September 2026
- Last updated
- 3 September 2026
- Supersedes
- Version 2.0, effective 28 August 2026
1.Scope
This Cookie Notice explains what Wavn, Inc. (Wavn, we) stores on or reads from your device when you use the marketing site at wavn.ai or the platform at wavn.app and my.wavn.app, why, for how long, and how you control it.
It forms part of the Privacy Notice and uses the same defined terms. Where this notice and the Privacy Notice differ on storage technologies, this notice governs.
“Cookies” means more than cookies. In this notice, cookies covers HTTP cookies and equivalent technologies that store or access information on your device, including local storage, session storage, IndexedDB and pixels. The law that governs them, including Article 5(3) of Directive 2002/58/EC and its national implementations, applies by reference to the storage or access, not to the technology used.
2.What we use, exactly
We use a deliberately small set. The table states what each category is for, who sets it, and how long it lasts.
| Category | Purpose | Set by | Duration |
|---|---|---|---|
| Strictly necessary | Authenticating your session, keeping you signed in, routing requests, load balancing, and protecting against cross-site request forgery and automated abuse. The Service cannot function without these. | Wavn (first party) and our hosting provider | Session, or up to the lifetime of the sign-in you chose |
| Preferences | Remembering choices you have made in the interface, such as language or a panel state, so they survive a reload. | Wavn (first party), stored in local storage | Until you clear site data |
| Security | Detecting and mitigating abuse, credential stuffing and denial-of-service traffic. | Wavn and our hosting provider | Session to 12 months |
| Strictly necessary (across our own domains) | One cookie named __Host-wavn_in, set when you sign in to the platform, so that this website can show you your account instead of asking you to sign in a second time. It records only that a signed-in session exists. It contains no identifier, no name, no email address and no token, it grants access to nothing, and it is read by no party other than Wavn. It is cleared when you sign out. | Wavn (first party, set on my.wavn.app and read by wavn.ai) | 30 days, or until you sign out |
Fonts. The site loads typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). This does not set a cookie, but your browser’s request discloses your IP address and user agent to that provider so the font file can be returned. If you prefer not to make that request, block those hosts; the site remains fully functional and falls back to typefaces already on your device.
What we do not use. We set no advertising cookies, no cross-site tracking pixels, no social media trackers, no data-broker tags, and no behavioural analytics. We run no advertising. We do not sell or share the data these technologies would generate, because we do not generate it. The __Host-wavn_in cookie in clause 4 is read across our own two domains and is not an exception to this: a tracker follows a person between sites belonging to DIFFERENT parties and records what they do there, while __Host-wavn_in is read only by Wavn, on Wavn’s own two domains, carries no identifier, and records nothing at all beyond the fact that you are signed in. If that ever changes, this notice and the consent mechanism in clause 5 will change in the same release, and the change will be recorded on the changelog before it takes effect.
3.Legal basis
Strictly necessary cookies. These are exempt from the consent requirement of Article 5(3) of Directive 2002/58/EC because they are strictly necessary to provide a service you have explicitly requested. The associated personal data is processed on the basis of performance of a contract, and for security purposes on the basis of our legitimate interests.
Preference storage. Where a preference is stored solely to deliver a display choice you made, we treat it as strictly necessary to that request. Where it is not, we ask for consent first.
Everything else. Any non-essential cookie requires your prior consent, obtained through the mechanism in clause 5, which is not sought today because no such cookie is used.
4.How long they last
A session cookie is deleted when you close your browser. A persistent cookie remains until its stated expiry or until you delete it. Local storage has no expiry and persists until you clear site data or the Service removes it.
No cookie we set has a duration longer than twelve (12) months, and we do not silently renew a duration by re-setting a cookie on each visit for a purpose that does not require it.
5.Your controls
Consent, when it is required. Because we currently set only cookies that are exempt from consent, we do not display a consent banner. A banner asking permission for something that needs no permission trains people to click through the ones that do. If we introduce a non-essential cookie, we will present a consent mechanism before it is set, with refusing made as easy as accepting, no pre-ticked boxes, and the ability to withdraw consent as easily as it was given.
Browser controls. You can block or delete cookies in your browser settings, and can clear local storage by clearing site data. Blocking strictly necessary cookies will prevent you from signing in and will stop the Service working.
Global Privacy Control. We honour the Global Privacy Control signal where your browser sends it. Because we do not sell or share personal information, the signal changes nothing about what we do; we recognise it so that our answer is verifiable rather than asserted.
Do Not Track. There is no common industry standard for responding to Do Not Track browser signals, and we do not respond to them separately. Our practices are the same whether or not the signal is sent.
Questions. Write to privacy@wavn.ai.
6.Changes to this notice
We may update this notice. The updated version is posted here with a new version number and effective date in the masthead, and recorded on the changelog.
Where a change introduces a technology requiring consent, that consent will be sought before the technology is deployed, and not treated as given by continued use of the Service.
Wavn, Inc. Questions about this document go to legal@wavn.ai. The other instruments that bind alongside it are the Terms of Service, Acceptable Use Policy, Privacy Notice, Cookie Notice, Data Processing Addendum, the Sub-processor List and the Refund Policy.