We keep this short because we keep tracking minimal.
Last updated: October 2026
Walilock is a zero-knowledge password manager, and that principle extends to our website. Our website sets no cookies. It uses a small amount of browser storage to keep you signed in, complete a purchase, and remember a couple of preferences — nothing more. This page explains exactly what we store, why, and how you can control it.
The short version: no cookies of our own — just essential and functional browser storage on your device. We do not use third-party advertising cookies, we do not track you across other websites, and we do not sell your data — ever.
A cookie is a small text file a website stores in your browser. On each request, the browser sends the cookie back so the site can recognize your session — for example, to keep you logged in as you move between pages.
Local storage (and sessionStorage) is a related browser mechanism that lets a site save small values on your device without sending them to a server on every request. This is what Walilock’s website uses, and nothing it stores is sent to us automatically.
Both are stored on your device. Neither can read your vault: your encryption keys never leave your device, and nothing we store in your browser can decrypt your data.
We use two categories only:
When you check out, payment is handled by Stripe on checkout.stripe.com. Stripe sets its own cookies on that page to process the payment securely and prevent fraud. Those cookies are governed by Stripe's own privacy and cookie policies, and Walilock never sees your card details.
| Name / Purpose | Type | Provider | Duration |
|---|---|---|---|
| walilock_jwtYour sign-in session for the account area, so you stay signed in as you move between pages. | Essential | Walilock (session storage) |
Cleared when you close the tab or sign out; the session itself expires after 1 hour |
| walilock_emailThe email address you signed in with, shown in the account area. | Essential | Walilock (session storage) |
Cleared when you close the tab or sign out |
| walilock_registered_emailFills in the sign-in form with the email you just registered. | Essential | Walilock (session storage) |
Cleared once used, or when you close the tab |
| walilock_checkoutCarries your sign-in session across the trip to Stripe, so your new plan can be linked to your account when you return. | Essential | Walilock (local storage) |
Cleared when you return from checkout; ignored after 2 hours |
| walilock_activate_pendingHolds your plan’s activation code if you need to sign in after paying, so the plan still gets linked to your account. | Essential | Walilock (session storage) |
Cleared once used, or when you close the tab |
| walilock_langRemembers the language you chose in the language picker, so the site stays in that language as you move between pages. | Functional | Walilock (local storage) |
Kept until you switch language again or clear site data |
| walilock_checkout_langRemembers which language you started checkout in, so you come back to that language after paying on Stripe. | Functional | Walilock (local storage) |
Cleared when you return from checkout; ignored after 6 hours |
| walilock_display_nameThe display name you chose on your account page. It stays on this device and is never sent to us. | Functional | Walilock (local storage) |
Until you clear it or remove the name |
| Stripe’s cookiesSet by Stripe on its own checkout page to process your payment securely and prevent fraud. Walilock does not set or read them. | Essential | Stripe (checkout.stripe.com) |
Controlled by Stripe |
Storage names may change as we update the site; the purposes and categories above are what matter and will always be honored.
To be explicit:
If that ever changes, we will update this policy first and never quietly switch on tracking. See our Privacy Policy for the full picture of how we handle data.
You are always in control. Every major browser lets you view, block, or delete cookies and clear local storage from its settings — usually under Privacy or Site data:
Note: blocking or clearing site data for walilock.com signs you out, and during checkout it can stop your new plan from linking to your account automatically (you can still sign in and activate it). Functional entries can be cleared safely; you will just lose your saved display name.
If we change what we store in your browser, we will update this page and revise the "Last updated" date above. Material changes — for example, introducing any cookie or any new category of storage — will be announced clearly before they take effect. We encourage you to check back occasionally.
Questions about this policy or how we handle cookies? We are happy to help. Reach our privacy team at privacy@walilock.com, or use the form on our contact page.