Cookies Policy

COOKIE AND OTHER IDENTIFIERS POLICY
Website wedely.com and Wedely mobile application
Last updated: April 29, 2026

1. What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It allows the website to recognise your device during subsequent visits and to store certain information, such as your language preferences or the items in your cart.

This policy also covers other identifiers (pixels, invisible beacons, mobile advertising identifiers such as IDFA and AAID) that serve similar purposes.

2. Legal framework
The placing and reading of cookies and identifiers on your device are subject to the following provisions:
  • the amended Law of 30 May 2005 on electronic communications (Article 4);
  • Regulation (EU) 2016/679 (GDPR);
  • the guidelines of the Luxembourg supervisory authority on cookies and other identifiers.
In accordance with these texts, the placing of non-strictly-necessary cookies requires your prior, free, specific, informed and unambiguous consent.

3. Collecting your consent
On your first visit, a banner informs you of the presence of cookies and allows you to:
  • accept all cookies (« Accept and close »);
  • refuse all non-strictly-necessary cookies (« Refuse »);
  • customise your choice by category (« Modify »).
The acceptance and refusal options are presented with equivalent visual prominence. Until you have made a choice, only strictly necessary cookies are placed.

You can change your preferences at any time by visiting wedely.com/cookies_consent. Withdrawing your consent is as easy as giving it (Article 7.3 GDPR).

4. Categories of cookies used
4.1. Strictly necessary cookies
Essential for the operation of the website. No consent required. Legal basis: legitimate interest in the operation of the platform.

ECSID, PESID
Issuer: wedely.com   •   Duration: Session / 180 days
Purpose: session identifiers — maintaining your connection
popup_consent
Issuer: wedely.com   •   Duration: 180 days
Purpose: storing the fact that you have been informed of the cookie banner
functional_consent, marketing_consent
Issuer: wedely.com   •   Duration: 180 days
Purpose: storing your choices regarding functional and marketing cookies
lang, menu_language
Issuer: wedely.com   •   Duration: 2 days / 30 days
Purpose: storing your browsing language and menu reading language
delivery_date, delivery_auto, pickup, p_date, p_time, p_asap, p_pickup
Issuer: wedely.com   •   Duration: from 1 hour to 1 year
Purpose: storing your delivery or collection preferences during browsing
last_address, last_lat, last_long
Issuer: wedely.com   •   Duration: 30 days
Purpose: avoiding re-entry of the last searched address and remembering the corresponding coverage area
supermarket
Issuer: wedely.com   •   Duration: 30 days
Purpose: storing the point of sale chosen for grocery shopping
source, referral
Issuer: wedely.com   •   Duration: Session
Purpose: knowing from which channel or page you arrived on the website (for support purposes)
show_in_app
Issuer: wedely.com   •   Duration: 1 day
Purpose: storing whether you have dismissed the suggestion to download the app
__stripe_sid, __stripe_mid
Issuer: Stripe (USA — DPF)   •   Duration: 30 minutes / 1 year
Purpose: fraud prevention during card payment

4.2. Functional and audience measurement cookies (consent required)
These enable improvement of the user experience and audience measurement. Placed only with prior consent.

Note on Hotjar/Contentsquare: this tool records in pseudonymised form certain interactions with the website (mouse movements, clicks, scrolls) to produce aggregate heatmaps and usability diagnostics. It does not record the content of sensitive fields (passwords, payment data and other confidential information are automatically suppressed before transmission). You can disable it at any time from the cookie settings.

_ga, _ga_*
Issuer: Google Analytics 4 (Google LLC — USA, DPF)   •   Duration: 2 years
Purpose: audience measurement, browsing statistics
_gid, _gat
Issuer: Google Analytics   •   Duration: 1 day / 1 minute
Purpose: limiting the number of requests, counting
_hjSessionUser_*, _hjSession_*, _hjIncludedInPageviewSample, _hjAbsoluteSessionInProgress
Issuer: Hotjar / Contentsquare (USA — DPF)   •   Duration: Session to 365 days
Purpose: pseudonymised analysis of the user journey (clicks, scrolls), aggregate heatmaps

4.3. Marketing and targeted advertising cookies (consent required)
These enable the display of targeted advertising on other websites and the measurement of its effectiveness. Placed only with prior consent.

_fbp
Issuer: Meta / Facebook (USA — DPF)   •   Duration: 3 months
Purpose: visit tracking for targeted advertising
_gcl_au
Issuer: Google Ads (USA — DPF)   •   Duration: persistent
Purpose: advertising conversion tracking
_uetsid, _uetvid, MUID
Issuer: Microsoft Bing Ads (USA — DPF)   •   Duration: from 1 day to 13 months
Purpose: session tracking and advertising targeting

4.4. Mobile advertising identifiers (IDFA/AAID)
When you use the Wedely mobile application, unique identifiers assigned by your device's operating system may be processed: IDFA (Identifier for Advertisers, iOS) and AAID (Android Advertising ID). These are qualified as personal data under European case law.

How we use them:
  • Install attribution measurement: they allow us to know whether you installed the app after seeing one of our advertising campaigns on another website or in the App Store;
  • Advertising retargeting: our partners (Meta, Google, Microsoft) use them to show you relevant ads on other apps and websites.
When they are used:
  • On iOS: only after you have accepted the « App Tracking Transparency » request that Apple shows you on the first launch of the app;
  • On Android: only after you have accepted marketing cookies/identifiers.
You can reset or disable these identifiers at any time from your device's system settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).

5. Transfers outside the European Union
Some cookies and identifiers are issued by technical partners established outside the European Union, in particular in the United States (Google, Meta, Microsoft, Hotjar/Contentsquare, Stripe). The transfer is governed by the EU-US Data Privacy Framework adequacy decision (Decision (EU) 2023/1795) where the recipient is validly certified, otherwise by standard contractual clauses and a transfer impact assessment.

6. Your rights
You can at any time:
  • change your preferences at wedely.com/cookies_consent;
  • delete stored cookies via your browser settings;
  • disable mobile advertising identifiers in your device settings.
For rights relating to the GDPR, see our Privacy Policy.

7. Updates
This policy is updated to reflect technical and legal developments. Any material change will be brought to your attention.