In plain words
- The join page, the status page and the staff pages only use what they need to work: your language, your place in line on your own device, and staying signed in.
- Google Analytics runs only on our marketing, legal and guide pages, and only after you accept it in the cookie banner.
- "Reject all" is as easy as "Accept all", and a Global Privacy Control signal counts as "Reject all".
- Change your choice any time with "Cookie settings" at the bottom of the page.
What cookies and similar technologies are
Cookies are small files a website saves in your browser. Local storage is a similar place in your browser where a page can keep information on your device. This policy covers both on the Walk-In Waitlist website, including the join page, the status page, the staff pages and the admin pages. The staff app for iOS and Android stores its settings on the device in the same way and has no analytics or advertising tools.
Necessary cookies and storage
These make the site work. They are always on, because the pages cannot work without them, and they are never used for advertising.
| Name | Where | What it does | How long | Set by |
|---|---|---|---|---|
walkin_locale | Customer pages and the website | Remembers the language you chose | 1 year | Walk-In Waitlist (first party) |
walkin_staff_locale | Staff pages (/app) | Remembers the staff language | 1 year | Walk-In Waitlist (first party) |
sb-…-auth-token (may be split into parts ending in .0, .1) | Staff and admin pages (/app, /admin) only | Keeps you signed in and refreshes your session | Up to 400 days, renewed while you use it; removed when you sign out | Walk-In Waitlist through Supabase, our sign-in provider (first party) |
walkin_consent | Marketing, legal and guide pages | Remembers your cookie choice and the version of this policy you answered | 6 months | Walk-In Waitlist (first party) |
| Cloudflare Turnstile | The join page only | Checks that a person, not a bot, is joining the line. It runs in a frame from Cloudflare and may keep short-lived data in that frame for the check. Cloudflare does not use it for advertising. | The visit | Cloudflare (third party) |
Local storage (necessary):
| Name | What it does | How long |
|---|---|---|
walkin:visit:… | Remembers your place in a shop's line on this device, so scanning the QR code again opens your status page instead of a new spot | Until the visit ends or the link expires |
walkin:locale | Your language on the customer pages | Until you clear it |
| Staff app storage | On the staff pages: the shop you were working in, the email waiting for its sign-in code, setup progress, and the PIN lock (a salted code of the PIN, never the PIN itself) | Until you sign out or clear it |
The customer pages never set a sign-in cookie.
Analytics cookies (only with your consent)
On our marketing pages (such as the home and pricing pages), the legal pages and the guides, we use Google Analytics 4 to count visits and see which pages help people. It runs only if you accept analytics in the cookie banner. It never runs on the join page, the status page, the staff pages or the admin pages.
| Name | What it does | How long | Set by |
|---|---|---|---|
_ga | Tells visits from different browsers apart with a random id | 2 years | Google Analytics, as a first-party cookie on our domain |
_ga_ followed by our measurement id | Keeps the state of your current visit | 2 years | Google Analytics, as a first-party cookie on our domain |
How we set it up:
- Google Consent Mode v2. Until you choose, the consent signals for analytics storage, ad storage, ad user data and ad personalization are all "denied", and the Google Analytics script is not even loaded. Nothing from Google loads before you accept.
- No advertising features. Google signals, advertising features and ads personalization are off. Google Analytics 4 does not log or store IP addresses.
- Google processes the data as our service provider under its terms for Google Analytics.
The cookie banner
On marketing, legal and guide pages you see a banner the first time you visit (only when analytics is set up):
- Accept all turns on analytics.
- Reject all keeps only the necessary cookies. It is the same size and weight as Accept all.
- Choose lets you turn analytics on or off. A "marketing" switch is shown for the future; we use no marketing cookies today.
Your choice is stored in the walkin_consent cookie for 6 months. When this policy changes in a way that matters, we ask again. To change your mind, use Cookie settings at the bottom of any marketing, legal or guide page. Turning analytics off stops it from that moment and deletes the _ga cookies it already set on this site.
When Google Analytics is not set up, there is no banner, only a note at the bottom of the page that we use only the cookies needed to run the site.
Global Privacy Control
If your browser sends the Global Privacy Control signal, we treat it as "Reject all": analytics stays off while your browser sends it, even if you accepted before, and Cookie settings tells you so.
Controlling cookies in your browser
You can block or delete cookies in your browser's settings. If you block necessary cookies, parts of the site may not work: for example the staff pages cannot keep you signed in.
Changes
We will update this page when we add or change a cookie, with a new version number and date.
Contact
Kallos Labs LLC, our support email (coming soon). See also the Privacy Policy.
Change log
- Version 1.0, October 1, 2026: First version.
Questions about this page? Write to our support email (coming soon).