Last updated: October 13, 2026
This page explains the cookies and similar storage that WizeFund uses, grouped by category. WizeFund runs no advertising cookies and does not track you across other websites. Public giving, fundraising, donation embeds and event flows use no optional analytics cookies and show no cookie-preferences panel. Storage needed for checkout, security and payment fraud prevention remains available. Your saved preferences still apply on other app surfaces.
Required for the platform to function — authentication, session management, security (CSRF protection), and load balancing. The site cannot work without these, so they are always on and exempt from consent.
How to opt out: These cannot be switched off because the platform cannot operate without them. You can block all cookies in your browser, but parts of the site will not work.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| __Secure-next-auth.session-token | WizeFund (first-party) | Keeps you signed in. Without it you would have to re-authenticate on every page. | Session / 30 days |
| __Host-next-auth.csrf-token | WizeFund (first-party) | Cross-site request forgery (CSRF) protection for sign-in and form submissions. | Session |
| next-auth.callback-url | WizeFund (first-party) | Returns you to the right page after signing in. | Session |
| wf_analytics_consent | WizeFund (first-party) | Remembers your cookie popup choice (accept, reject, or closed) so the popup is not shown again. | 1 year |
Remember your preferences — such as light/dark theme — so the interface matches your choices between visits. No personal data leaves your browser.
How to opt out: Clear your browser storage for this site, or use a private/incognito window, to reset preferences. The site still works without them.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| wf-theme | WizeFund (first-party) | Remembers your light / dark theme preference. | 1 year (local storage) |
First-party product analytics that help us understand which pages and features are used so we can improve the platform. These are ON by default on other app surfaces, but never run on public giving, fundraising, embedded donation or event flows. They record which pages you visit and which features you use — with record ids and links scrubbed, and never the contents of forms — and never record your screen. They are never used for advertising.
How to opt out: Choose "Reject All" in the cookie popup, or reopen "Cookie Preferences" at any time and switch Analytics off. Signed-in users can also switch analytics off under Settings › Privacy. Unless you have chosen "Accept All", a browser Global Privacy Control or "Do Not Track" signal also turns analytics off. Accounts in child-safe mode never receive analytics.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| ph_* (PostHog) | PostHog | First-party product-usage analytics: a pseudonymous visitor id so page views and feature use can be counted. Removed when you reject analytics; never set on the embedded giving form. | 1 year |
| wf_gpa:* (Giving Page analytics) | WizeFund (first-party) | On a school's Giving Page only: a random visit id, when you were last active and how the visit arrived (for example, from an email appeal), so the school can see — in totals only — how visitors move from the page to a gift. It holds nothing about you and never what you type. Not set when you reject analytics or your browser sends a privacy signal, removed when you reject analytics, and never set on the embedded giving form. Data is sent to WizeFund only, never to another company. | Local storage; a visit ends after 30 minutes without activity |
WizeFund does not run advertising cookies and does not track you across other websites. Unless you have chosen "Accept All" in the cookie popup, we treat a browser Global Privacy Control or "Do Not Track" signal as an instruction to disable product analytics. An account whose analytics setting is switched off is never tracked.
Analytics are on by default, so we show a cookie popup until you choose Accept All, Reject All, or your own preferences — or close it, which keeps the default. You can change your choice at any time:
An account in child-safe mode is never tracked: analytics cookies are not set and product-analytics events are suppressed, regardless of any other choice. This protection cannot be turned off for those accounts.
See also our Subprocessors and Privacy Policy.