Waypoint Cookie Notice
DRAFT - NOT LEGAL ADVICE - pending review by Eon Simon and a licensed attorney
DRAFT NOTICE: This is a draft Cookie Notice for waypointmiles.com (intended URL: waypointmiles.com/cookies.html). It is not legal advice and has not been reviewed by an attorney. Cookie names and durations below are placeholders or inferences and must be replaced with the actual inventory from the live site and app (check browser developer tools > Application > Cookies / Local Storage on both the marketing site and the signed-in app). Items marked "REVIEW FLAG" must be resolved and removed before publication, together with this notice and the DRAFT banner.
Waypoint — Miles made simple
Last Updated: [DATE]
1. What This Notice Covers
This Cookie Notice explains how SIMTEK LLC, a Louisiana limited liability company doing business as Waypoint ("Waypoint," "we," "us"), uses cookies and similar technologies (such as local storage) on waypointmiles.com and in the Waypoint web application. It should be read with our Privacy Policy.
Cookies are small text files stored by your browser. Local storage and session storage are similar browser features that store small amounts of data on your device.
2. Our Approach
- We use essential cookies needed to sign you in, keep your session secure, and run checkout.
- We do not use advertising cookies, and we do not allow cross-site tracking or ad networks on our site. [CONFIRM.]
- Analytics: [TBD]. We have not yet decided whether to use analytics. If we do, this Notice will be updated before analytics are turned on.
- Waypoint does not use cookies or any other technology to track your device's location. The optional "Use my current location" button reads your location once, only when you tap it and allow it, and is controlled by your browser's location permission, not by cookies (see our Privacy Policy Section 3.2).
3. Cookies We Use
3.1 Essential cookies (always on)
These are required for the Service to work and cannot be switched off in our systems. You can block them in your browser, but sign-in and checkout will not work.
| Cookie / storage item | Set by | Purpose | Duration |
|---|---|---|---|
[SESSION COOKIE NAME — e.g., waypoint_session] |
Waypoint (first party) | Keeps you signed in (whether you signed in with email and password, Google, or SSO) and links requests to your authenticated session | [Session / XX days — CONFIRM] |
| [CSRF TOKEN COOKIE NAME — CONFIRM IF USED] | Waypoint (first party) | Protects forms and requests against cross-site request forgery | [Session — CONFIRM] |
| [REFRESH/REMEMBER-ME TOKEN — CONFIRM IF USED] | Waypoint (first party) | Keeps you signed in between visits, if you choose | [XX days — CONFIRM] |
[g_state — CONFIRM, only if Google One Tap / Google Identity Services prompt is used] |
Google Identity Services script, on our domain | Remembers the state of the Google sign-in prompt | [Up to ~6 months — CONFIRM] |
| Google account cookies (on google.com domains) | Used by Google during Google Sign-In; governed by the Google Privacy Policy | Set by Google | |
[__stripe_mid, __stripe_sid — CONFIRM, only if Stripe.js is loaded on our pages] |
Stripe | Fraud prevention during payment | [~1 year / ~30 minutes — CONFIRM] |
| Stripe cookies on checkout.stripe.com / billing.stripe.com | Stripe | Payment processing and fraud prevention if you use Stripe-hosted checkout or customer portal; governed by the Stripe Privacy Policy and Stripe Cookie Policy | Set by Stripe |
| [ORGANIZATION SSO COOKIES] | Your organization's identity provider | Sign-in through your organization's SSO | Set by the provider |
3.2 Functional / preference storage
| Cookie / storage item | Set by | Purpose | Duration |
|---|---|---|---|
| [PLACEHOLDER — e.g., UI preferences, last-used view, saved filters] | Waypoint (first party) | Remembers your display preferences | [CONFIRM] |
| [PLACEHOLDER — Google Maps JavaScript API storage, if a Google map is displayed] | Display of Google Maps content | [CONFIRM] |
3.3 Analytics cookies — [TBD]
| Cookie / storage item | Set by | Purpose | Duration |
|---|---|---|---|
| [TBD — NONE CURRENTLY / NAME OF ANALYTICS TOOL] | [TBD] | [TBD] | [TBD] |
3.4 Advertising cookies
None. [CONFIRM.]
REVIEW FLAG — Analytics decision (TBD): Decide whether to use analytics at all. Options: (a) none; (b) privacy-focused, cookieless analytics on the marketing site only; (c) a full analytics tool (e.g., Google Analytics), which would likely require a consent banner for some visitors, a "share"/targeted-advertising analysis under state privacy laws, and Privacy Policy updates. Recommended: no third-party analytics inside the signed-in app, especially for Organization Customers.
REVIEW FLAG — Cookie inventory: The essential-cookie names above are inferred from the authentication (Google Sign-In / SSO) and Stripe billing design, not from an actual scan. Run a cookie scan of the marketing site, sign-in flow, app, and checkout, and replace every bracketed entry. Remove rows that do not apply. Also check embedded fonts, CDNs, error-monitoring, and chat widgets. The DM Sans font is self-hosted on our own site, so no third-party font request is made.
REVIEW FLAG — Consent banner: If only essential cookies are used, a consent banner is generally not required for U.S. visitors. If non-essential analytics or any advertising technology is added, revisit (and consider honoring Global Privacy Control signals).
4. Your Choices
- Browser settings: most browsers let you view, delete, and block cookies. Blocking essential cookies will prevent sign-in and checkout.
- Google and Stripe: cookies set by Google or Stripe on their own domains are controlled by those companies; see their privacy policies linked above.
- Do Not Track / Global Privacy Control: we do not use cookies for advertising or cross-site tracking, so these signals do not change how our site works. [CONFIRM GPC HANDLING IF ANALYTICS ARE ADDED.]
5. Changes
We will update this Notice when we change the cookies we use and will change the "Last Updated" date above.
REVIEW FLAG — Notice address: At Eon's direction, the SIMTEK LLC mailing address has been removed from the website; contact is SIMTEK LLC at appsupport@waypointmiles.com. A physical or mailing address for notices may be legally required (for example under privacy, consumer-protection, or e-commerce rules). Waypoint Legal to confirm.
6. Contact
Questions about cookies: appsupport@waypointmiles.com
SIMTEK LLC, doing business as Waypoint
END OF DRAFT — DRAFT - NOT LEGAL ADVICE - pending review by Eon Simon and a licensed attorney.