Legal
Cookie Policy
What this covers
This policy explains what we store on your device when you visit wearewhisper.com, why we store it, and how you change your mind. It sits alongside our Privacy Policy, which covers personal data more broadly.
Cookies are small text files a site stores in your browser. Some browsers also offer local storage, which does the same job in a different place. We use both, and this policy covers both.
Your choice
We split what we store into two groups.
Strictly necessary items make the site work and remember what you have told it. These are set without asking, because the site cannot do its job without them and they do not track you.
Analytics and embedded content are the second group, and both are set only if you accept. Analytics cookies tell us how the site is used so we can improve it. Embedded content means our LinkedIn feed on the news page, which is served by another company and sets cookies of its own. Nothing in this group loads until you accept: if you reject, or ignore the banner, Google Analytics is never downloaded, the LinkedIn feed is never requested, and no cookie from either is created.
You can change your mind at any time. Change your cookie choice.
What we store
Strictly necessary
| Name | Type | Purpose | Expires |
|---|---|---|---|
whisper-theme |
Local storage | Remembers whether you chose the light or dark version of the site. | Until you clear your browser data |
whisper-consent |
Local storage | Remembers whether you accepted or rejected analytics, so we stop asking. | Until you clear your browser data, or we change what we store |
aws-waf-token |
Cookie | Tells our firewall your browser is a real one, so the enquiry form is not swamped by automated submissions. | Short-lived. A completed check counts for five minutes. |
awswaf_session_storageawswaf_token_refresh_timestamp |
Local storage | Used by the same firewall check to avoid repeating itself on every page you open. | Until you clear your browser data |
The first two do not identify you, leave your browser, or get read by anyone else. The firewall items are set by AWS WAF, from Amazon Web Services EMEA SARL, on the pages carrying our enquiry form. They protect the form from abuse rather than tell us anything about you, which is why they are in this group and not behind the banner. Legal confirmed that classification on 16 October 2026.
Analytics – only if you accept
We use Google Analytics 4, provided by Google Ireland Limited. It sets two cookies:
| Name | Type | Purpose | Expires |
|---|---|---|---|
_ga |
Cookie | Distinguishes one visitor from another. | 2 years |
_ga_<container-id> |
Cookie | Keeps track of the current visit. | 2 years |
We use analytics to see which pages people read, how they arrive and what does not work. We do not use it for advertising, we do not link it to Google Ads, and we do not sell the data. Google drops the IP addresses of UK and EU visitors before logging them, so we never see or store them. Google processes this data on our behalf; Google’s own terms are at business.safety.google/privacy.
Embedded content – only if you accept
The LinkedIn feed on our news page is served by EmbedSocial, which loads it inside a frame from their own site. That frame in turn loads YouTube’s video player, provided by Google Ireland Limited, so that posts containing video can play. Loading the player is what sets the cookies below, whether or not you press play on anything.
| Name | Type | Purpose | Expires |
|---|---|---|---|
VISITOR_INFO1_LIVE |
Cookie, youtube.com | Identifies the browser to YouTube and carries its playback preferences. | 2027 |
VISITOR_PRIVACY_METADATA |
Cookie, youtube.com | Records the cookie choice YouTube has for this browser. | 2027 |
__Secure-YNID |
Cookie, youtube.com | A security token YouTube uses to identify the browser. | 2027 |
__Secure-ROLLOUT_TOKEN |
Cookie, youtube.com | Tells YouTube which version of its player to serve. | 2027 |
YSC |
Cookie, youtube.com | Keeps track of the current visit to the player. | When you close your browser |
The names and durations above were read from a clean browser session on this site; the durations are Google’s to set, and your browser will show the exact dates. All five are marked secure and partitioned, which means they are kept separate from the cookies YouTube sets on other sites you visit.
We use this feed to show our own LinkedIn posts in one place. We do not use it for advertising and we do not pass it anything about you. EmbedSocial’s own terms are at embedsocial.com/cookie-policy, and Google’s at business.safety.google/privacy.
Controlling cookies in your browser
Your browser gives you the final say. You can block or delete cookies in its settings, and most browsers let you do this per site. Blocking strictly necessary items will not break the site, but it will forget your theme and ask about cookies again on every visit.
aboutcookies.org explains how to do this in every modern browser.
Changes to this policy
If we change what we store, we update this page and ask you again. The date at the top tells you when it last changed.
Contact
Questions about this policy go to legalnotices@wearewhisper.com.