Cookie Policy
Kiosk Wizard sets three cookies, all of them strictly necessary. There is no analytics cookie, no advertising cookie, and nothing that follows you to another website — which is why you were not asked to dismiss a banner.
- Effective
- July 25, 2026
- Applies to
- www.kioskwizard.com
Why there is no consent banner
Under the EU ePrivacy Directive and the UK PECR, consent is required before storing anything on your device except where it is strictly necessary to provide a service you asked for. Every cookie we set falls in that exception: keeping you signed in, and keeping a shopper’s basket together long enough to check out.
A banner asking permission for cookies you cannot refuse without breaking the product would be theatre. If we ever add analytics or anything non-essential, a genuine opt-in banner will appear with it and this page will say so.
The cookies we set
| Cookie | Set when | What it does | Lifetime | Category |
|---|---|---|---|---|
sb-<project>-auth-token | Signing in to the dashboard | Keeps you signed in between pages and refreshes your session. Without it you would have to re-enter your password on every request. | Until you sign out, or one year | Strictly necessary |
sb-<project>-auth-token-code-verifier | Starting a sign-in or password reset | A short-lived value that ties the link in your email back to the browser that asked for it, so a stolen link cannot be used elsewhere. | Minutes — deleted as soon as sign-in completes | Strictly necessary |
cartToken:<kiosk> | Adding the first item to a cart on a kiosk screen | Holds the random cart identifier issued by the shop's own WooCommerce store so the basket survives while a shopper browses. Contains no name, email, or order content. | 24 hours; cleared when the order is placed or the screen resets | Strictly necessary |
All three are first-party, set on our own domain. The session cookies are HttpOnly, Secure, and SameSite=Lax, so they cannot be read by scripts and are not sent along with cross-site requests.
Other storage on your device
- Light/dark preference— stored in your browser’s
localStorageunder the keytheme, not in a cookie. It never leaves your device and is not sent to us. - Kiosk offline cache— a kiosk installed as an app registers a service worker that caches the site’s static files and an offline page, so a screen on the shop floor does not go blank when the Wi-Fi drops. It caches no product data, no cart, and no personal data. Uninstalling the kiosk app or clearing site data removes it.
Third-party cookies
We set none on our own pages, and we load no third-party scripts or fonts at runtime. Two exceptions sit outside our pages entirely:
- Stripesets cookies on its own hosted checkout and billing portal for fraud prevention. Those pages are Stripe’s, governed by Stripe’s privacy policy.
- Your own WooCommerce storemay set cookies when a kiosk talks to it. Those belong to the shop, not to us, and are covered by that shop’s cookie notice.
Controlling cookies
Every browser lets you view, block, and delete cookies in its settings. Because ours are strictly necessary, blocking them will sign you out of the dashboard and stop a kiosk cart from working — nothing else will break.
More information
For the full picture of what we do with personal data, see the Privacy Policy. Questions about this page go to support@kioskwizard.com.