Our approach to cookies
Justwon ApS, registration no. DK46667816, Ekkodalen 13, 3450 Allerød, Denmark, is the data controller for the cookies and similar browser storage described here. We use a small number of first-party cookies (and equivalent browser storage) that are strictly necessary to run the service or that remember your preferences. We do not use third-party analytics cookies, advertising or behavioral tracking cookies, or cross-site tracking, and we do not sell personal data. The cookies described here are set so the website and application can function and remember your choices. The one third-party item is the Google scheduling window described below.
Our use of cookies and similar storage may involve processing of personal data; please also read our Privacy Policy, which describes our processing of personal data and your rights.
What are cookies?
A cookie is a small text file stored on your device (computer, phone, or tablet) by a website you visit. A session cookie lasts only until you close your browser; a persistent cookie remains for a set period or until you delete it. First-party cookies are set by Justwon; third-party cookies are set by another domain.
Some browser data we rely on is not a cookie at all but local storage or session storage, which keeps preferences on your device and is not transmitted to our servers with every request (see the storage section below).
Cookies we use
These first-party cookies may be set across the Justwon website (justwon.ai) and application. We do not claim this list never changes; we update this policy when it does, and we will never add an analytics or advertising cookie without updating this policy first.
The sign-in cookies are set by our sign-in software. In production their names carry a __Secure- prefix, which means your browser sends them only over an encrypted connection. They are HTTP-only, so scripts on the page cannot read them.
| Cookie Name | Where | Purpose | Category | Duration |
|---|---|---|---|---|
justwon.session_token | Application | Keeps you signed in and maintains your authenticated session | Strictly necessary | Up to 30 days, renewed while you use the application |
justwon.session_data | Application | A short-lived signed copy of your session, so we do not check the database on every request | Strictly necessary | 5 minutes |
justwon.two_factor | Application | Holds the second-factor step of a sign-in | Strictly necessary | 10 minutes |
justwon.state, justwon.oauth_state | Application | Holds the state of a sign-in with Google or Microsoft | Strictly necessary | 5 minutes |
justwon.passkey_challenge | Application | Holds the challenge of a passkey sign-in or of adding a passkey | Strictly necessary | 5 minutes |
justwon.session_token.oauth_logout_confirmation | Application | Confirms a sign-out asked for by an application you have connected to Justwon | Strictly necessary | 5 minutes |
cookie_consent | Website | Records your choice on the cookie notice (see below) | Strictly necessary | 1 year |
app_theme | Application | Remembers your light/dark theme so the page renders correctly without a flash | Preference | 1 year |
app_agent_width | Application | Remembers the width of the agent panel | Preference | 1 year |
justwon_active_organization | Application | Remembers which organization workspace you last selected | Preference | 1 year |
The cookie notice. The choice you make on the website's cookie notice (Accept or Decline) is stored in cookie_consent. The choice records that you have seen this notice; it does not switch any cookie on or off, because we set no cookies that need consent. It does not control the Google scheduling window described below either.
Browser storage (not cookies)
We also use your browser's localStorage and sessionStorage to keep certain preferences on your device. These are not cookies and are not sent to our servers with each request:
| Storage Key | Where | Purpose | Category |
|---|---|---|---|
app_locale, app_locale_settings | Application (localStorage) | Your language, date, time, number, currency and time zone settings | Preference |
justwon:last-auth-provider | Application (localStorage) | Remembers which sign-in method you last used, to streamline your next login | Preference |
justwon:sso-integration-suggestion:* | Application (localStorage) | Remembers that you dismissed the suggestion to connect your Google or Microsoft account, per workspace and provider | Preference |
justwon:mfa-suggestion-snooze:* | Application (localStorage) | Remembers that you postponed the suggestion to set up two-factor sign-in, per account | Preference |
justwon:passkey-suggestion:*, justwon:passkey-here:* | Application (localStorage) | Remember that you postponed or declined the passkey suggestion, and that this browser already has a passkey for your account | Preference |
justwon:active-nudge, justwon:shown-nudge | Application (sessionStorage) | Make sure only one reminder is shown per browser session | Preference |
Note on authentication: your login session is held in the HTTP-only justwon.session_token cookie above. It is not stored in localStorage.
The Justwon browser extension uses no cookies. It keeps its sign-in and its settings in the browser's extension storage on your device.
Google scheduling window
If you open the demo booking window on our website, Google loads its scheduling page inside it and may set its own cookies. We do not control those cookies; see Google's own policies. The window loads only when you open it.
How to manage or delete cookies
You can delete or block cookies through your browser settings; note that blocking the strictly-necessary cookies above will prevent parts of the service (such as staying signed in) from working. General guidance on managing cookies is available at www.cookiesandyou.com.
Changes to this policy
We will update this Cookie Policy as our use of cookies and similar technologies evolves and will revise the "Last updated" date above.
Contact
Questions about this Cookie Policy? Contact us at legal@justwon.ai.