Cookie Policy
This policy covers two things: the cookies on wholayer.com, and how the WhoLayer tag works when one of our customers installs it on their website.
Cookies on wholayer.com
We keep this site light. We do not use advertising cookies or third-party tracking pixels on wholayer.com.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
__Secure-better-auth.session_token | Essential | Keeps you signed in to your WhoLayer account. Set only when you log in. | 7 days, renewed while you use the dashboard |
better-auth.dont_remember | Essential | Set only if you choose not to stay signed in, so your session ends when you close the browser. | Session |
Vercel Web Analytics | Analytics | Counts page views without cookies or cross-site identifiers. | No cookie set |
Essential cookies are needed for the site to work, so they cannot be turned off. You can block cookies in your browser, but you may not be able to sign in.
The WhoLayer tag on customer websites
Our customers install a small piece of JavaScript, the WhoLayer tag, on their websites. When you visit one of those sites, the tag sends us the page you are viewing, the referring page, your IP address, your browser and device type, and the identifiers below. We use that information to tell the website owner which company, and in the United States which person, is likely visiting, so they can follow up.
| Cookie (set on the customer's domain) | Purpose | Duration |
|---|---|---|
_wl_vid | Random visitor identifier for the customer's site, so repeat visits are not billed twice. | 13 months |
_wl_sess | Groups page views into a visit. | 30 minutes |
_wl_opt | Records that this browser has opted out, so the tag stays off. | 5 years |
Built-in limits on the tag
- Global Privacy Control. If your browser sends a GPC signal, the tag does not identify you and sends us nothing beyond what is needed to recognize the opt-out.
- Opt-outs. If you have opted out with us or with the website, the tag stays off for your browser and we suppress your identity everywhere.
- United States only for people. Visitors outside the United States are never identified as individuals. Outside the US, company-level identification only runs after the site's consent banner records your consent where the law requires it.
- No sensitive pages. Customers may not install the tag on pages about health, religion, sexual orientation, and other sensitive topics, or on sites for children. See our Acceptable Use Policy.
- No form contents. The tag does not read what you type into forms, and it does not record your screen.
How to opt out
- Turn on Global Privacy Control in your browser or use a browser that sends it by default.
- Use the “Do Not Sell or Share” link on the website you are visiting.
- Submit a request on our privacy request page. This opts you out across every WhoLayer customer, not only one website.
Questions
Email legal@wholayer.com or write to WhoLayer, Inc., 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801. For privacy requests, use our privacy request page.