Last updated: 11 October 2026
Webglobe uses a small number of first-party storage mechanisms. Strictly necessary and functional storage is always active because it is required for security or a feature you request. Optional analytics is activated only after your consent.
These mechanisms secure forms and the admin environment, remember your cookie choice, and retain preferences you actively select. They cannot be disabled through the consent panel. Public pages remain available if you refuse optional analytics. Registration, account activation, login and MFA cannot work if your browser blocks the necessary session, CSRF or security cookies.
If you choose “Allow statistics”, Webglobe stores first-party pseudonymous visitor and session identifiers. We record the viewed page, time, language, device type, browser family, operating system, referring domain and approximate country, region and city. The raw IP address and complete user-agent are not stored in analytics. The IP address may be sent to IPinfo for bounded location enrichment and is used to derive a keyed monthly network identifier.
The same statistics choice also covers conversion steps: website → demo → contact → accepted inquiry, and separately Kook & Ko product → cart → checkout → confirmed test payment upon return. We reuse the signed analytics-session cookie; no additional cookie is placed for these flows. The pseudonymous step records expire after at most 180 days and contain no account or order details.
Kook & Ko searches without a result use the same optional consent and existing analytics session cookie, with no additional cookie. Only submitted searches are measured; typing and empty results caused by filters are excluded. Refusal, withdrawal, DNT and GPC stop new observations. Search measurements are retained for at most 90 days.
We also measure visible time on each page. When you are signed in to the demo store, analytics additionally links login frequency, active days, server-confirmed demo-store and catalogue page views, dashboard page use, and PWA installation and opening events to your account. A random local installation token is stored only in hashed form on the server. Individual analytics records are retained for no more than 180 days; an app installation is reported as active after activity in the last 90 days.
Optional account-linked usage statistics also cover management dashboards and management-app installation/opening events when consent is given. Necessary app authorisation and security records are separate and continue to protect your account if you refuse analytics.
Before consent, after refusal, or when Global Privacy Control/Do Not Track is active, no individual analytics record, analytics cookie or analytics-purpose IPinfo lookup is created. We may keep identifier-free daily page-view totals, including only the group “no store login”, “store user” or “administrator” for demo-store pages; no account, cookie, session, network or device identifier is stored in these totals. A separate IPinfo lookup may occur only after successful account authentication to show an approximate session location and update the visible recognized-device history. Refusing has no effect on access to public pages and is never changed by account login or registration. We use no advertising cookies, cross-site tracking or advertising profiles.
Approximate IP-location data can be provided by IPinfo.
| Name / storage | Purpose | Category | Duration |
|---|---|---|---|
__Host-webglobe_language |
Host-only cookie that remembers the language you selected. | Functional | 12 months |
__Host-webglobe_analytics_choice |
Host-only preference that records whether you allow or refuse optional analytics; this value alone never authorises measurement. | Necessary | 6 months |
__Host-webglobe_analytics_consent |
HttpOnly, server-signed proof of your analytics choice. It prevents a self-made or subdomain cookie from enabling measurement. | Necessary | 6 months |
__Host-webglobe_csrf |
Host-only protection for forms and account actions against forged requests. | Necessary | 8 hours |
__Host-webglobe_session |
Host-only session for the administrator, demo-store accounts and authorised CMS users. | Necessary | Own-device sign-in: max. 7 days, administrators/powerusers also 48-hour inactivity limit. Shared-device opt-out: 30-minute inactivity / 8-hour hard limit |
__Host-webglobe_device |
Host-only random device recognition for login security and remembered MFA. | Necessary | 12 months |
__Host-webglobe_demo2_session |
Separate Kook & Ko account session and server-side form protection. | Necessary | 30-minute inactivity and 8-hour hard limit; remember me max. 7 days |
__Host-webglobe_demo2_device |
Random, host-only device code binding Kook & Ko sign-ins to this browser. | Necessary | 180 days |
__Host-webglobe_analytics_visitor |
Host-only, signed identifier that pseudonymously distinguishes a returning browser after consent. | Optional analytics | 6 months |
__Host-webglobe_analytics_session |
Host-only, signed identifier that groups page views into a session after consent. | Optional analytics | 30 minutes, sliding |
localStorage: webglobe_pwa_installation_* |
Distinguishes an account or management app installation after consent and sign-in. | Optional analytics | 180 days; removed earlier on refusal or withdrawal; server record max. 180 days |
sessionStorage: service-worker marker |
Prevents repeated cache-cleanup reloads. | Necessary | Browser tab session |
localStorage: freq-forge-demo-cart-v1 (+ -expires), freq-forge-cart-reminder-v1:*, freq-forge-cart-sync-v1 |
Requested cart, reminder choice and sync deduplication; no advertising profile. | Functional | 30 days without cart changes; cleanup on subsequent use |
sessionStorage: webglobe-kitchen-demo-v1, webglobe-kitchen-compare-v1, webglobe-kitchen-list-v1, webglobe-kitchen-pending-checkout-v1 |
Requested cart/favorites/comparison, catalogue return position and payment return recovery. | Functional | Tab session; restored browser sessions may retain it; removable in browser settings |
localStorage: webglobe_pwa_last_open_*, webglobe_management_app_last_open |
Optional app-open deduplication after consent, separately from necessary management security observations. | Necessary / Optional analytics | 30-minute deduplication window; timestamp remains until replaced or cleared; optional values removed on refusal |
localStorage: webglobe_pwa_push_offer_* |
Remembers whether you accepted or dismissed the app push offer; no measurement identifier. | Functional | Until changed or removed in browser settings |
localStorage: wg-logout-shared, wg-logout-kitchen |
Cross-tab logout notification, follows the necessary logout cookie. | Necessary | Removed on next visit when the logout cookie no longer exists |
sessionStorage: login throttle / newsletter refresh guard / service-worker reload marker |
Temporary request cooldown, stale administration reload prevention and version cleanup. | Necessary | Tab session; cooldown expires at the displayed deadline |
You can reopen the consent panel at any time. Withdrawal stops future analytics immediately and removes the analytics cookies on the next request. The consent choice itself is kept so we do not ask again on every page.
Necessary storage is based on the exception for storage required to deliver a requested service or secure communication. Authentication sessions keep the original login IP and an approximate country, region and city until the session expires or is revoked; when enabled, IPinfo receives the login IP no more than once per authentication session for this estimate. This display-only location processing is based on Webglobe’s legitimate security interest and never controls device identity, risk or authentication. Analytics is based on your consent. Webglobe stores only the bounded location result in analytics and does not share analytics profiles with advertising networks.
For the processing of personal data and your rights, see the privacy policy. Questions can be sent to info@webglobe.be.