Version 2026-11-02.4
Cookies and browser storage
Prelaunch notice: the operator’s full legal and hosting details are still being completed. Payments are test only.
Current storage
The public landing page has no advertising, analytics or tracking SDKs. The studio uses first party storage for requested functionality. There is no optional tracking category to accept.
| Item | Purpose | Lifetime |
|---|---|---|
| hub_session / __Host-hub_session | Signed in session; HttpOnly, SameSite=Lax; Secure in production | 7 days, or logout |
| hub_preauth / __Host-hub_preauth | Sign in CSRF and OAuth browser security; HttpOnly | 15 minutes |
| wonderframeTheme (local storage) | Your selected Light or Black appearance | Until replaced or cleared in your browser |
| wonderframeCheckout (session storage) | Resume your selected test plan after sign in | 30 minutes validity, or tab closure |
| Workspace recovery (session storage) | Recover unsaved work within the current signed in session | Current tab; validity and account checked on recovery |
Control
Sign out to end your session. Your browser can clear cookies and site storage; this also removes saved appearance and unsaved recovery data and can prevent sign in. External Google and Meta authorization pages have their own policies. No external media embed or third party tracking script loads on the landing page.
If tracking changes
Optional trackers must remain off until a suitable consent interface offers equally accessible accept and reject choices and a way to withdraw. The current app does not load such trackers, so no tracking consent banner is displayed.