Cookie & Local Storage Notice

1. Summary

WhateverGo uses one first-party session cookie that is strictly necessary for signed-in features, and browser local storage for settings and locally saved study state. It does not use advertising cookies or cross-site behavioural profiles.

No consent banner is shown for strictly necessary technology. If non-essential analytics, advertising or personalisation technology is introduced later, WhateverGo will update this notice and obtain consent first wherever applicable law requires it.

2. Cookies

Name/provider	Purpose	Typical duration
`__Host-wgo_session` · WhateverGo	Authenticates the signed-in account. It is Secure, HttpOnly, SameSite=Lax and restricted to the host root.	Up to 7 days; earlier on sign-out, revocation or deletion.
Cloudflare security cookies, if triggered	Protect the network from abuse and confirm legitimate traffic. Exact names and duration depend on Cloudflare's security response.	Only as required by the relevant security feature.

Because the session cookie is HttpOnly, page scripts cannot read it. Blocking it means account and saved workspace features will not work.

3. Local browser storage

Key or family	Purpose
`wgo:device-id`	Pseudonymous device identifier used for security and device management.
`wgo-theme`	Remembers light or dark appearance.
`chem_tutor_`, `physics_tutor_`, `cs_tutor_*`	Locally saved tutor chats, current conversation and highlights.
`cs_p4_completed`	Remembers completed Computer Science practical lessons.
`formulaSheetTocCollapsed`	Remembers formula-sheet navigation state.
Economics tutor chat key	Stores local Economics conversation state under a subject-specific key.

Local chat privacy: local storage is not an encrypted vault. Anyone with access to your unlocked browser profile may be able to read it. Do not save sensitive information in tutor chats on a shared device.

4. Cloudflare Web Analytics

WhateverGo uses Cloudflare Web Analytics for aggregate site measurements. Cloudflare states that this product does not use cookies, local storage or fingerprinting and does not collect or use visitors' personal data for analytics. Separate Cloudflare network and security processing may still involve request metadata such as an IP address.

Read Cloudflare's data collection documentation and Privacy Policy.

5. How to control or remove it

Use sign out to revoke the active server session; the cookie is also cleared by the browser response.
Use your browser's site-data settings for whatevergo.com to remove cookies and local storage.
Clearing local storage deletes local-only chats, progress and preferences on that browser. It does not necessarily delete server-saved account data.
To delete server data or the account, follow the Data Rights & Account Deletion Guide.

6. Regional notes

UK: access to or storage on a device follows PECR, as amended. Strictly necessary storage does not require consent; optional technology will require a valid choice where the law says so.

中国大陆：本网站仅使用登录、安全和用户主动要求的本地学习功能所必需的浏览器技术，不以广告追踪为目的。WhateverGo 是境外网站；本说明不会把用户直接使用境外网站的行为描述为中国境内处理者的数据出境。

Hong Kong and Singapore: browser identifiers are handled consistently with the purpose, notice, security and retention duties described in the Privacy Policy.

7. Contact and changes

Email questions to yuchenwang0115@gmail.com. Changes appear with a new effective date.