Cookie notice.

This notice explains the cookies and similar technologies used on whatworldway.com . It is part of, and should be read alongside, our Privacy Policy .

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are used to make the site work, remember your preferences, and help the operator understand how the site is being used. Some cookies are set by us; others are set by third-party services we use.

2. Strictly necessary cookies

These cookies are essential to deliver a service you have requested. Under UK and EU law, they do not require your consent. On what-world-way we use the following:

session — wyww_at / wyww_rt / wyww_gid

HttpOnly auth cookies set by the backend the moment you click Finish on your first test (or sign in). They let the server recognise you across page loads so your portrait persists.

lifetime

Access token cookie expires within a day; refresh token cookie within a month. Both clear on sign-out.

CSRF / security tokens

Protect against cross-site request forgery and other security threats during sign-in and form submissions.

lifetime

Session.

The public marketing pages on this domain do not by themselves set session cookies. These cookies are set only when you actively finish a test, sign up, or sign in.

3. Analytics — first-party, cookieless (no analytics cookies)

For aggregate traffic measurement we use our own first-party analytics on Potentialisation servers. The browser sends short beacons (page path or funnel step) to our API. We set no analytics cookies and we do not load any third-party analytics script. Counts are stored as daily aggregates (for example pageviews by path, approximate daily uniques, country where known). Because no analytics cookies are set and we do not retain personal data for traffic measurement, no cookie consent banner is required under UK PECR for this analytics.

For approximate daily uniques and country, the server may use your IP address in memory only (hash + optional offline country lookup) and does not store the IP in our analytics database.

We do not track URLs that could identify you. Pages whose address carries a personal identifier — a share link ( /share/… ), your account area ( /account ), and admin pages — are never recorded as path keys. Everything else, including your result and the portrait pages, is counted only in aggregate: that a page was viewed, never who viewed it.

Once you start a test, we record a small number of usage events (test starts and completions, combo page views, feedback clicks, share clicks) on our own servers, tied to your user account. These events are described in our Privacy Policy under “Usage events on your own account”. They do not require any cookie on your device beyond the strictly necessary session cookies described above.

Links to our site published on social media or in newsletters may include a short tag in the URL (for example, ?src=fb-launch ). When you land on a page carrying such a tag, our server increments an anonymous counter so we can see how many people each channel sent us. The counter does not identify you and does not store anything in your browser.

4. Cookies we do not use

• Google Analytics cookies ( _ga , _gid , etc.)
• Any third-party analytics cookies
• Advertising or remarketing cookies
• Social-media tracking pixels (Facebook, LinkedIn, etc.)
• Session-replay or heatmap tools
• Cross-site tracking cookies

Because we don’t use any non-essential cookies, we don’t need a cookie consent banner. If that changes in the future, we will update this notice and, where required by law, ask for your consent before any non-essential cookies are set.

5. Third-party services on linked pages

When you proceed to take an test or make a payment, you may be served pages that load Stripe (for secure payment) or other third-party services. Those services set their own cookies, which Stripe and similar providers describe as strictly necessary for fraud prevention and authentication. See Stripe’s privacy policy for details.

6. How to control cookies in your browser

You can control or delete cookies at any time through your browser settings. Most browsers also let you block all cookies, block third-party cookies, or be notified before a cookie is set. The following links explain how:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Disabling cookies will not stop you from browsing the public marketing pages, but will prevent you from saving your test results (sign-in won’t persist) or migrating a guest take into a real account.

7. Changes to this notice

We may update this Cookie Notice from time to time to reflect changes to our practices, the technologies we use, or the law. The “Last updated” date at the top of this page tells you when it was last revised.

8. Contact

Questions about cookies or our use of analytics? Email privacy@potentialisation.com .