Cookie Policy

1. What cookies are

A cookie is a small text file that a website asks your browser to store and to send back on the next request. Because HTTP has no memory of its own, cookies are how a site recognises that the person loading the checkout page is the same person who filled the cart two minutes ago.

Two distinctions matter for this policy:

Session vs persistent. A session cookie is discarded when you close your browser or when it expires; a persistent cookie survives until its expiry date or until you delete it.
First-party vs third-party. A first-party cookie is set by the site you are actually visiting. A third-party cookie is set by someone else — usually an advertising or analytics network — and is the kind that can follow you between sites. WisdomCharms sets no third-party cookies.

2. How we use them

Only for the mechanics of a working shop. Cookies on this site let us keep your cart while you browse without demanding you create an account, keep you signed in between pages, and stop a malicious site from submitting a form on your behalf.

They are not used to track what you look at, to build an interest profile, to measure ad campaigns, or to share anything with a third party. There is no advertising network involved in this store at all.

3. Every cookie we set

This is the complete list. If you audit the site and find a cookie that is not on it, please tell us at misteryjj100@gmail.com — that would be a bug and we want to know.

Name	Category	Purpose	Lifetime
`wisdomcharms_session`	Strictly necessary	The session cookie. Holds a random identifier that links your browser to the server-side session record containing your sign-in state, your cart reference and any one-off message we need to show you after a redirect. The identifier itself is meaningless to anyone who does not have our database.	120 minutes (2 hours) of inactivity
`XSRF-TOKEN`	Strictly necessary	Cross-site request forgery protection. Carries the token that every form on this site must submit back so we can prove the request came from a page we served, and not from another site acting in your name. Without it, checkout and every form is rejected.	Same as the session cookie
`remember_web_*`	Strictly necessary (functional)	Set only if you tick “Remember me” when signing in. Keeps you signed in after the session cookie expires, so your library is one click away. Deleted when you sign out. If you never tick the box, this cookie is never set.	Up to 5 years, or until you sign out
`cart_id`	Strictly necessary	Not a separate cookie — a key stored inside the server-side session identified by the session cookie above. It holds the numeric id of your cart so that a guest can add courses, keep browsing and still find them at checkout. It is listed here for completeness because it is the reason the session cookie exists for signed-out visitors.	Lives and dies with the session
Analytics and advertising	Optional	None are set. This store ships with no analytics, tag manager, advertising pixel, heat-map recorder or A/B testing script. Should we ever add product analytics, we will update this table, ask for your consent first, and keep the site fully usable if you decline.	Not applicable

All of our cookies are first-party, are marked HttpOnly where the browser does not need to read them, use SameSite=Lax, and are sent with the Secure flag over HTTPS in production.

4. Local storage

One preference is kept in your browser's localStorage rather than in a cookie: whether you last viewed the shop as a grid or a list. It is a single word, it never leaves your device, it is never sent to our server, and clearing your browsing data removes it.

We use no other local storage, no session storage, no IndexedDB and no browser fingerprinting.

5. Third-party cookies

We set none on this store. Two related points are worth being precise about:

Stripe. When you click through to pay, you are taken to a payment page hosted by Stripe on Stripe's own domain. Stripe sets its own cookies there, for fraud prevention and to make the payment work, under Stripe's own privacy notice. Those cookies are Stripe's, not ours, and they are not set while you are on this store.
Google Fonts. Our two typefaces are requested from Google's font CDN. Google does not set cookies on font requests, but your IP address is necessarily visible to them in order to serve the file.

Links from our courses out to third-party documentation, repositories and tools are subject to those sites' own cookie practices, which we do not control.

6. Why there is no cookie banner

Under the EU ePrivacy Directive (2002/58/EC) — implemented in Estonia by the Electronic Communications Act, and by equivalent national rules across the EU — consent is required for cookies that are not strictly necessary for a service the user has requested. Every cookie in the table above is strictly necessary: without them you cannot sign in, cannot keep a cart, and cannot submit a form.

So there is nothing to ask you to consent to, and we would rather give you a site that works than an overlay that has to be dismissed on every visit. If we ever add an optional cookie, a proper consent choice appears at the same time — with a genuine “reject” that is as easy to click as “accept”.

7. How to control cookies

You are in charge of your browser. Every major browser lets you view, delete and block cookies, for all sites or for one:

Google Chrome — Settings → Privacy and security → Third-party cookies, and “See all site data and permissions” to remove data for a single site. Menu path on Android: ⋮ → Settings → Site settings → Cookies.
Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data (“Manage Data…” removes a single site; “Enhanced Tracking Protection” controls blocking).
Apple Safari (macOS) — Safari → Settings → Privacy → Manage Website Data. On iOS and iPadOS: Settings → Apps → Safari → Advanced → Website Data.
Microsoft Edge — Settings → Cookies and site permissions → Manage and delete cookies and site data.
Brave — Settings → Shields, then Privacy and security → Cookies and other site data.
Opera — Settings → Privacy & security → Cookies and other site data.

Most browsers also offer a private or incognito window, which discards all cookies when you close it, and a “clear browsing data” shortcut — usually Ctrl+Shift+Delete, or ⌘+Shift+Delete on a Mac.

Independent, non-commercial guidance on cookies and how to manage them is available at aboutcookies.org.

8. What breaks if you block them

Because our cookies are all strictly necessary, blocking them has real consequences on this site — we would rather warn you than let you discover it at checkout:

Your cart will empty on every page load.
You will not be able to sign in, or you will be signed out immediately.
Every form — checkout, contact, coupon, newsletter — will be rejected as an invalid request.
You will not be able to complete a purchase.

Browsing the catalog and reading course pages works fine with cookies blocked. Buying does not.

9. Changes to this policy

If we add, remove or change a cookie, this page is updated at the same time and the “Last updated” date at the top changes with it. If we ever introduce a non-essential cookie, we will ask for your consent before setting it.

This policy should be read together with our Privacy Policy, which explains what we do with personal data more generally.

10. Contact us

Questions about cookies, or an audit result that does not match the table above? Email misteryjj100@gmail.com and we will answer within one business day. You can also use the contact form.

The cookies described here are set by WisdomCharms, the company that operates WisdomCharms and the controller for any personal data they involve. Its full details are on the Privacy Policy and the contact page.