Back to Wayzi Marketplace
WAYZI MOBILITY LTD · 17520049EU Art. 27 Representative
Wayzi Legal & Compliance ArchitectureWZ-LEGAL-COOK-2026.4v4.2 (PECR & ePrivacy)

Cookie Policy

Granular technical segmentation of strictly necessary session state tokens, client-side cryptographic authentication mechanisms, localization state storage, and explicit opt-in scripts for analytics and attribution.

Estimated Reading Time
3 min read · 510 words (6 clauses)
Effective Date: 1 January 2026
Last Reviewed: October 2026
Jurisdiction: UK PECR · EU ePrivacy Directive 2002/58/EC

Executive Statutory Summary: Strictly necessary authentication and checkout security tokens are active by default; all functional, analytics, and attribution scripts require explicit affirmative opt-in consent.

Interactive Consent Control Panel

Manage Your Cookie & Storage Preferences

Default strict privacy mode active (only strictly necessary tokens enabled).

1. Strictly Necessary Session & Cryptographic Auth TokensAlways Active

Required for cryptographic session authentication, CSRF protection, Stripe 3D Secure (SCA) checkout security, and storing your privacy consent vector.

2. Functional & Localization State Storage

Remembers your selected interface language (EN, LV, LT, PL, RU, UK), preferred currency display, and recent route search corridor parameters.

3. Performance & Aggregated Telemetry Analytics

Helps us measure route search latency, checkout funnel reliability, and client-side errors using pseudonymized, aggregated telemetry.

4. Partner Referral & Campaign Attribution

Used only to attribute Wayzi Club referral invitations and measure official partner corridor campaigns. Never used for third-party behavioral ad retargeting.

1
Section 1

Cryptographic Session Tokens, Browser Storage & ePrivacy Framework

1.1

Scope of Browser Storage Technologies on Wayzi

This Cookie Policy explains how WAYZI MOBILITY LTD deploys HTTP cookies, cryptographic browser local storage keys, session storage states, and client-side telemetry tokens across the Wayzi Platform in compliance with the UK Privacy and Electronic Communications Regulations (PECR), the EU ePrivacy Directive (2002/58/EC), and the UK/EU GDPR.

By default, Wayzi initializes only Strictly Necessary storage tokens required to authenticate your identity, secure checkout payments, and record your privacy preferences. All optional functional, analytics, and attribution scripts remain deactivated unless and until you grant affirmative opt-in consent via our Interactive Cookie Consent Manager.

2
Section 2

Granular Segmentation of Storage & Tracking Categories

2.1

Category A: Strictly Necessary Session & Cryptographic Auth Tokens (Always Active)

These tokens are technically indispensable for the operation and security of the multi-vendor marketplace and cannot be disabled in our consent manager:

Cryptographic Identity Session Tokens — Short-lived JSON Web Tokens (JWTs) and refresh credentials stored in browser storage to maintain your authenticated Customer, Partner, Driver, or Admin session across route transitions and protect against Cross-Site Request Forgery (CSRF).
Payment Security & 3D Secure (SCA) Fingerprinting — Anti-fraud device tokens deployed by our payment gateway during checkout to verify cardholder authenticity under PSD2 Strong Customer Authentication mandates.
Consent Vector Persistence Key — A structured local storage record storing your timestamped cookie consent choices and policy version so your preferences are respected on every subsequent visit.
2.2

Category B: Functional & Localization State Tokens (Opt-In / User Preference)

Functional storage keys enable the Platform to remember explicit interface customizations you initiate:

Locale & Language Persistence — Stores your active language selection (EN, LV, LT, PL, RU, UK) and regional date/currency display formatting.
Search Corridor & PWA Shell State — Remembers your recently searched origin and destination countries, seat selection drafts, and mobile progressive web app display mode preferences.
2.3

Category C: Performance & Aggregated Telemetry Analytics (Explicit Opt-In)

When explicitly enabled by you, performance tokens measure route search latency, checkout funnel completion rates, and client-side rendering exceptions so our engineering team can optimize marketplace responsiveness. All analytics telemetry is pseudonymized and evaluated in aggregate.

2.4

Category D: Partner Referral & Campaign Attribution Tokens (Explicit Opt-In)

When enabled, attribution tokens record referral invitation codes when you arrive via a Customer or Partner referral link so that Wayzi Club referral bonuses can be accurately credited upon completion of your first verified booking.

3
Section 3

Real-Time Consent Modification & Browser-LevelPurge Protocols

3.1

Modifying or Withdrawing Consent at Any Time

You may inspect your active consent status and toggle optional cookie categories at any time using the Interactive Cookie Consent Manager embedded at the top of this page or via the "Cookie preferences" control in the Platform footer. Withdrawing consent takes effect immediately on the client and suppresses any further non-essential script execution.

WAYZI MOBILITY LTD (Reg. 17520049)

Bowen Suite, The Globe Centre, 1 St. James Square, Accrington, England, BB5 0RE · Document Ref: WZ-LEGAL-COOK-2026.4