Cookie Statement
Version 2026-11-03
Template. This statement is a template prepared for the Assistant Workshop service. It is not legal advice. Before it is used in production, the operator must have it reviewed by a qualified lawyer and complete every field in square brackets.
Changes from version 2026-11-02: a business's chat page keeps a conversation only for the browser tab and removes one an earlier version kept on the device; the website chat on a business's own website forgets a conversation idle for 24 hours; the booking page keeps its short access to a booking only for the browser tab.
1. Technical cookies, and one with your consent
The cabinet and our website use first-party cookies only. Most of them are technical: they make the service work or remember a choice you made, and they need no consent. One cookie, aw_attr, only helps us understand where the businesses who sign up come from: we set it only if you accept it on the banner of our website. We do not use advertising cookies, third-party analytics or cross-site tracking.
2. The cookies
| Cookie | What it does | How long |
|---|---|---|
| __Host-aw_session | Technical. Keeps you signed in. It holds a random token; only its hash is stored on our side. | Until you sign out, at most 30 days |
| aw_locale | Technical. Remembers the language of the cabinet. | 1 year |
| aw_theme | Technical. Remembers the light or dark appearance you chose. | 1 year |
| aw_sidebar | Technical. Remembers whether the side menu is collapsed. | 1 year |
| aw_motion | Technical. Remembers that you asked the cabinet for less motion ("Reduce motion" in the account menu). | 1 year |
| aw_tz | Technical. Remembers your device's time zone, so pages that belong to no business show the times your clock shows. | 1 year |
| aw_consent | Technical. Remembers your answer on the cookie banner (accepted or rejected), so we do not ask again on every page. | 6 months |
| aw_attr | Only with your consent. Remembers which page or link first brought you to our website, so a new account knows where its owner came from. It is first-party only, never shared, and deleted when you sign in or withdraw your consent. | Until you sign in, at most 90 days |
3. Your choice
The first time you open our website, a banner asks whether you accept the aw_attr cookie. "Accept" and "Reject" are offered side by side in the same way; closing the banner is the same as rejecting it, and until you answer the cookie is not set. Your answer is kept for 6 months in the aw_consent cookie; after that, or if the cookies we ask about change, the banner asks again. You can change your answer at any time with "Cookie settings" at the foot of every page of our website: withdrawing your consent deletes aw_attr at once.
The cabinet, the businesses' chat pages, their website chat and the booking pages show no banner: they set no cookie that needs consent.
4. Storage in your browser
The cabinet may keep small settings in your browser's local storage (for example which hints you have closed), and the assistant's test chat in the storage of the browser tab, which ends with the tab.
The businesses' chat pages and their website chat set no cookies. A business's chat page keeps the conversation (a random visitor key, the latest messages, how far the conversation has been read and whether it was passed to staff) in the storage of the browser tab only, so it is gone when the tab is closed; when the page opens, it removes a conversation that an earlier version of the page kept in the browser's local storage. Only the language you chose and the answers you rated stay in local storage. The website chat on a business's own website keeps the same conversation in that website's local storage, so it continues on the next page or visit, for up to 24 hours after the last message: a conversation idle for longer is removed the next time the chat loads. Both keep, for the tab only, whether the chat is open and the source the page names (for example a QR code), which the business's reports count.
The booking page opened from a booking confirmation exchanges the link for an access to the booking of about 30 minutes and keeps it in the storage of the browser tab only, so reloading the tab still opens the booking; the link in the confirmation keeps working.
When you sign out, the cabinet asks your browser to delete everything this site keeps on that device: its cookies (your cookie choice included), its storage and its cache.
5. The bot check
When the sign-in page asks for a bot check, Cloudflare Turnstile runs it in a frame of its own and handles what it needs under Cloudflare's own privacy policy. It is not used to track you.
6. Deleting cookies
You can delete cookies in your browser at any time. Without the session cookie you are signed out; without aw_consent the banner asks again; without the others the cabinet falls back to its defaults.
7. Contact
[Legal name of the operator], [e-mail for privacy requests].