WinWinLabs
A cookie is a small file a website asks your browser to keep. We use them to sign you in, to remember the invite link you arrived through, and — if you allow it — to count how many people use which pages.
Two of the things we store are not cookies. Our own analytics keeps its ids in your browser's local and session storage instead, which a cookie inspector will not show you. They do the same job, they are listed here with everything else, and the same switch turns them off.
Everything we set is listed below, by category — cookies and browser storage alike. You can change your mind about the optional categories at any time.
Right now: strictly necessary, functional. You have not made a choice yet, so only the categories that need no permission are running.
Signing in, staying signed in, getting back to the page you came from, and showing you whether a payment went through. The site does not work without these.
| Name | Set by | Lasts | What it is for |
|---|---|---|---|
ci_session
|
CodeIgniter session | Until you close the browser | Keeps you signed in for the length of a visit. On the development slots the port number is appended to the name so two slots do not sign each other out. |
wwl-token / wwl-refresh
|
libraries/Wwl_auth.php | Access token minutes; refresh token weeks | Signs you in once across winwinlabs.com and winwinlabs.org instead of once per site. |
redirect_to
|
Home, Organize, Winfocus, Sensorwatch controllers | Until you close the browser | Remembers the page you were trying to reach so signing in returns you to it instead of the home page. |
bStatus
|
controllers/Buycredits.php | 10 to 20 seconds | Carries the result of a card or bank payment across the redirect back from the processor, so the page can tell you whether it worked. |
s / rval
|
assets/js/gsdk-bootstrap-wizard.js | Until you close the browser | Holds the state of the multi-step sign-up form between steps. |
wwl_consent
|
helpers/consent_helper.php | 12 months | Remembers the choice you made on the cookie banner. Without it we would have to ask on every page. |
wwl_debug_mode
|
controllers/Admin.php | 30 minutes | Staff only, and cryptographically signed. Turns on diagnostic output for one administrator for half an hour. |
Remembers the invite or campaign link you arrived through, so the right person is credited and the right page is shown. First-party only -- nothing leaves WinWinLabs.
| Name | Set by | Lasts | What it is for |
|---|---|---|---|
referral
|
controllers/Home.php, assets/js/common.js | 1 hour | Remembers the invite code you arrived with, so the person who invited you is credited when you finish signing up. |
wwl_vid
|
libraries/Landing_experiment.php | 30 days | An anonymous id for this browser, so that if we are trying two versions of a page you keep seeing the same one, and so we can tell whether it worked. Not linked to your name, and never sent to anyone else. |
wwl_campaign_ctx
|
controllers/Home.php | 7 days | Remembers which campaign link brought you here, so the sign-up page shows the cause you clicked on rather than a generic one. Survives the gap between signing up, verifying your email, and first signing in. |
How the site is used. Our own tracker, which records the pages you open, what you click and how far you scroll, and stays with us; plus Google Analytics, which sends your IP address and browsing to Google.
| Name | Set by | Lasts | What it is for |
|---|---|---|---|
_wvid
Not a cookie — stored in your browser's localStorage |
assets/js/wwl-tracker.js | 30 days | Our own analytics. An anonymous id for this browser, so a returning reader is not counted as a new one. Stays on your device and is sent only to us. |
_wsid
Not a cookie — stored in your browser's sessionStorage |
assets/js/wwl-tracker.js | Until you close the tab | Our own analytics. Groups the pages you view in one sitting so a visit can be read as a visit. |
_ga
|
Google Analytics 4 (G-0HY2TZ0GEL), loaded by Google Tag Manager GTM-KSLM9S7 Third party |
2 years | Google Analytics. Distinguishes one visitor from another so a returning reader is not counted twice. |
_ga_0HY2TZ0GEL
|
Google Analytics 4 (G-0HY2TZ0GEL), loaded by Google Tag Manager GTM-KSLM9S7 Third party |
2 years | Google Analytics. Holds the state of your current session for this specific property. |
If your browser or an extension sends the Global Privacy Control signal, we treat it as you telling us not to share your information with third parties: analytics is switched off before anything loads, without you having to click anything.
It keeps working even if you have said yes here before. A choice you made last month cannot be an answer to a signal your browser is sending today, so while it is being sent, analytics stays off whatever the switch below says. Everything first-party still follows your own choice, and analytics follows it again as soon as your browser stops sending the signal.
We do not sell personal information and we do not share it for cross-context behavioral advertising — there is no advertising pixel on this site. The control is in the footer of every page anyway, and using it switches analytics off.
Every browser can block or delete cookies, and you do not need our permission. Be aware that blocking the strictly necessary ones will stop you being able to sign in, because the sign-in session is a cookie.
Our Google Tag Manager container holds exactly two tags, both Google Analytics: the base tag and one event that records when somebody opens the campaigns page. If that ever changes, this page changes with it.
How cookie data fits into everything else we hold is in the Privacy Policy.
Questions about this page? Email [email protected]. WinWinLabs is a 501(c)(3) non-profit; our IRS number is 84-4720243.
Legal notices and anything in writing: WinWinLabs, 11961 Amherst Ct, Plymouth, MI 48170.