Cookie Policy

Effective 1 September 2026 · Last updated 31 August 2026 · Version 1.0
Cura Spectra B.V.

Crooswijkseweg 97 B03, 3034 HG Rotterdam, the Netherlands
Chamber of Commerce (KvK) 94496005 · VAT NL866798274B01
support@wocomment.com

Effective date: 1 September 2026

Last updated: 31 August 2026

This policy explains the cookies and similar local storage used by wocomment.com and app.wocomment.com, operated by Cura Spectra B.V. (KvK 94496005).

1. The short version

We use cookies to keep you logged in, to protect the sign-in form and forms inside the app, and to remember interface preferences such as theme and density.

We do not use advertising, marketing, retargeting or cross-site tracking cookies. We do not sell or share cookie data, and we do not run third-party ad networks or social plugins on our site.

2. Cookies we set

CookieSet byPurposeDurationCategory
wocomment_sessionWoComment (first party)Keeps your session active between page loads. Without it you cannot stay logged in.Session (deleted when the browser closes) or 2 hours of inactivity of inactivityStrictly necessary
XSRF-TOKENWoComment (first party)Cross-site request forgery (CSRF) protection: proves that a form or API request came from our own app.SessionStrictly necessary
wocomment_rememberWoComment (first party)Optional "keep me signed in" — only set if you tick that box at login.30 daysAuthentication (functional)
wc_prefsWoComment (first party)Stores interface preferences: light/dark theme, table density, default inbox filter, language.12 monthsPreference (functional)
wc_cookie_noticeWoComment (first party)Remembers that you have seen the cookie notice, so we do not show it again.12 monthsFunctional

We also use browser localStorage in the app for non-identifying interface state (for example the last selected connected Page and column widths). This stays in your browser and is never sent to our servers.

3. Third-party cookies

The only third-party cookies you may encounter come from Stripe, our payment processor, and only when you open the checkout or the billing portal from Settings → Billing:

CookieSet byPurposeDuration
__stripe_midStripeFraud prevention — identifies the browser across payment sessions.12 months
__stripe_sidStripeFraud prevention — identifies the current payment session.30 minutes

These are set by Stripe under Stripe's own privacy policy (stripe.com/privacy). We do not control them and we cannot read them. They are used for payment security, not advertising.

> Note before publishing: confirm the exact cookie names and lifetimes emitted by the application and by your Stripe integration, and update this table if they differ. If you later add analytics, error monitoring or a chat widget, this table must be updated and a consent mechanism added for any non-essential cookie.

The cookies in section 2 are either strictly necessary to deliver the service you asked for, or functional preferences you set yourself. Under the Dutch Telecommunications Act and the ePrivacy Directive, these do not require prior consent, so we do not show a blocking consent banner. We show a short informational notice linking to this page instead.

Stripe's payment cookies are set only when you actively start a payment or open the billing portal, and are necessary to process that payment securely.

If we ever introduce analytics or any other non-essential cookie, we will ask for your consent first and give you a way to withdraw it.

5. How to control cookies

Note that WoComment reads comments from Facebook, Instagram and TikTok through official platform APIs on the server side. That happens without any cookie in your browser, and this policy does not cover cookies set by those platforms on their own websites.

6. Changes and contact

We update this policy when the cookies we use change. The "last updated" date above shows the current version.

Questions: support@wocomment.com

Cura Spectra B.V., Crooswijkseweg 97 B03, 3034 HG Rotterdam, The Netherlands.


This document is a template. It has not been reviewed by a lawyer and is not legal advice. Have it reviewed by qualified counsel before publishing, and verify the cookie table against the running application.