Legal
Cookie Policy
A short document, because we set very few cookies and run no advertising trackers.
Last updated 29 July 2026
The short version
This website uses cookies only where they are needed for the site to work and to remember a preference you have set. We do not run advertising networks, and we do not sell or share browsing data with third parties for marketing.
Self-hosted instances
A self-hosted Wraft deployment sets only its own session cookies. It makes no outbound calls to us and loads no third-party scripts, so nothing in this document gives us visibility into your instance. If you operate a self-hosted instance for your own users, you are the one deciding what else, if anything, it sets.
What we set
- Theme preference
- Stored in your browser's local storage, not a cookie, and only once you choose light or dark explicitly. It never leaves your device.
- Session
-
Set by the hosted app at
app.wraft.appafter you sign in, to keep you signed in. Strictly necessary — the application cannot function without it. - Security
- Cross-site request forgery tokens on forms. Strictly necessary, and discarded when the session ends.
What we do not use
- Advertising or retargeting cookies of any kind.
- Cross-site tracking pixels or social media trackers.
- Session recording or heat-mapping tools.
- Selling or sharing of browsing data with data brokers.
Managing cookies
Every major browser lets you view, block, and delete cookies through its settings. Blocking strictly necessary cookies will sign you out of the hosted app and prevent it from working, but it will not affect your ability to read this website.
Clearing local storage resets your theme preference, after which the site follows your operating system's light or dark setting again.
Contact us
Questions about this policy can be sent to privacy@wraft.app.
Questions about this document? Write to legal@wraft.app .