Legal
Cookie Policy
Operator: Codegrin Technologies · Product: WhatsApp AI Assistant · Last updated: September 23, 2026
What the Service uses today
The public marketing pages do not intentionally set analytics or advertising cookies. The authenticated application and OAuth connection flow use strictly necessary cookies for sign-in, session security, and request validation. These cookies are not used for advertising or cross-site tracking.
Strictly necessary cookies
| Name | Purpose | Typical duration |
| --- | --- | --- |
| __Host-wa_oauth_access | Authenticates requests from the signed-in workspace to the backend | Until the access token expires |
| __Host-wa_oauth_refresh | Renews an authenticated session without requiring an immediate sign-in | Up to 180 days, unless revoked or reconfigured |
| __Host-wa_app_session | Maintains a signed workspace-session identifier | Up to 24 hours, unless reconfigured |
| __Host-wa_oauth_state | Protects the OAuth sign-in redirect against request forgery | Up to 10 minutes |
| __Host-wa_oauth_verifier | Stores the temporary PKCE verifier used during OAuth sign-in | Up to 10 minutes |
| __Host-wa_oauth_return_to | Returns the user to the intended application page after sign-in | Up to 10 minutes |
| wa_oauth_browser_session | Maintains the temporary authorization-browser session on the API domain | Up to 30 days |
The __Host- prefix is used in production. Development environments may use the same names without that prefix. Authentication cookies are HTTP-only and use secure cookie settings in production. Signing out clears the application authentication cookies; server-side tokens may also be revoked.
Browser local storage
The Service also uses browser localStorage, which is not a cookie:
| Name | Purpose | Duration |
| --- | --- | --- |
| theme | Remembers the selected light or dark appearance | Until cleared |
| wa_recent_conversations:v2 | Keeps a limited, device-local list of recently opened conversations for workspace navigation | Until cleared or replaced by newer entries |
| whatsapp_primary_session_id:* | Remembers the selected WhatsApp session for a signed-in workspace | Until sign-out, replacement, or manual clearing |
Local-storage values remain on the device and are available to scripts running on this website. The application may use identifiers in these values to request authorized data from the backend, but it does not store OAuth access or refresh tokens in localStorage.
If this changes
If analytics, advertising, or other non-essential cookie technology is added in the future, this page will be updated. Where legally required, non-essential cookies will not be activated before the required consent is obtained, and an appropriate preference control will be provided.
This page reflects the application behavior reviewed as of the date above and should be re-verified whenever authentication, storage, analytics, or advertising technology changes.