Cookie Policy
Effective date: July 26, 2026
WonYet uses a deliberately small number of cookies. We built our own consent manager (no third-party consent SaaS). Beyond the strictly-necessary cookies, the only optional category is analytics — on by default for U.S. visitors (one tap to turn off), off until you opt in everywhere else, and reduced to anonymous, cookie-free counts whenever it’s off.
Strictly necessary (always on)
| Cookie | Purpose | Lifetime |
|---|---|---|
| wy_session | Keeps you signed in. | 60 days |
| wy_authed | A signed-in indicator that lets our menus show “My tickets” instead of “Log in”. Contains only the value “1” — no personal data and no identifier of any kind. | 60 days |
| wy_auth | The app’s equivalent signed-in indicator, so the ticket-checker app opens on the right screen. Contains only the value “1” — no personal data and no identifier of any kind. | 12 months |
| wy_consent | Remembers your cookie choices. | 12 months |
| wy_age | Remembers that you confirmed you’re of legal lottery age. Stores yes/no only — never a birth date. | 12 months |
| wy_pool_member | Lets you participate in a pool you joined before creating an account. | 180 days |
| wy_locale | Remembers your language choice so the site loads in the right language. | 12 months |
| wy_oauth_state | A short-lived security token that protects the “Sign in with Google” flow from cross-site request forgery. | ~10 minutes |
| wy_guest | Lets you try a free preview scan before creating an account, and prevents abuse of the anonymous-scan limit. Set only if you use the guest scan. | 7 days |
These are required for the site to function and are exempt from consent requirements. They contain no advertising identifiers and are never shared with third parties.
Functional (off until you opt in)
WonYet currently sets no functional cookies — opting in to this category sets nothing extra today. Interface preferences (for example, your theme choice) are stored in your browser’s localStorage on your own device and are never sent to us or to anyone else.
Analytics (on by default in the U.S.; off until you opt in elsewhere)
Cloudflare’s edge traffic stats are aggregate and cookieless and run always. Google Analytics runs in Google’s consent-aware “Consent Mode”: for U.S. visitors the Analytics category starts on (U.S. privacy law is an opt-out model — you can turn it off in one tap via the banner or Cookie settings, and we honor the Global Privacy Control signal absolutely); everywhere else it is off until you opt in. When Analytics is off or rejected, the cookies below are not set and nothing is stored on your device — at most, Google receives anonymous, cookie-free counts (which page, which action) that carry no identifier and cannot be tied to you. For EU/EEA, UK, and Swiss visitors, Google Analytics does not load at all until you opt in — not even the anonymous counts; the same applies with GPC on, anywhere. You can withdraw anytime via Cookie settings.
| Cookie | Provider | Purpose | Lifetime |
|---|---|---|---|
| _ga, _ga_* | Google LLC (Google Analytics 4) | Distinguish users for aggregate usage measurement. | ~13 months |
No ads, no ad targeting. WonYet shows no third-party ads and runs no remarketing, no ad-targeting pixels, no audience lists, no conversion tags, and no fingerprinting — on any plan. We load no advertising cookies of any kind. Our analytics providers process data only to provide analytics to us (Google “signals”/ads-data sharing off, ad personalization off). The only nudges you’ll ever see are WonYet’s own in-app notices, which set no cookies and share no data.
Managing your choices
Choose “Accept all,” “Reject all,” or customize by category when the banner appears on your first visit. Change your mind anytime via (also linked in the footer of every page). Rejecting everything leaves the site fully usable — only the strictly necessary cookies above remain, and analytics drops to the anonymous, cookie-free counts described above (or to nothing at all if your browser sends GPC).
You can also clear or block cookies in your browser settings; blocking the strictly necessary ones will sign you out.
Contact
Questions: privacy@wonyet.com.