Cookie Policy — Willifit

This page lists every cookie and every piece of browser storage Willifit uses — by name, with what it does and how long it lasts. No categories-only summary, no "and similar technologies" hand-waving. If it's on your device because of us, it's in the table below.

The one-line version. Willifit sets exactly two cookies, both from Google Analytics, and you can switch them off from the Cookie preferences control in the footer of any page. Everything else on the list is data your own browser keeps for you — your last city, your vehicle height, your favorites — which never reaches us and never needs your consent.

What's actually set

Two things live on your device when you use Willifit, and they are legally and practically different, so the table separates them:

Cookies are small files your browser sends back to a server with every request. Ours come from Google Analytics.
Device storage (localStorage and sessionStorage) is a place your browser keeps data for a site. It is never attached to a request automatically. Nothing in it reaches our servers unless the page deliberately sends it, and for the keys below it doesn't.

Every cookie and storage key Willifit uses on willifit.ai, grouped by whether it is a cookie or browser device storage. "Necessary" items make the site work and are set without asking; "Analytics" items are optional and controlled by your cookie preference.
Name	Provider	Purpose	Duration	Type
Cookies
`_ga`	Google — Google Analytics 4	Holds a randomly generated ID for your browser so that four visits from you are counted as one returning visitor rather than four new ones. It is not tied to your name or email; we never send Google anything you type into a form.	2 years	Analytics
`_ga_SH191K5NGS`	Google — Google Analytics 4	Keeps the state of your current visit: when it started, how many pages you've seen, and whether a new page view continues the same session. The suffix is our Google Analytics measurement ID, `G-SH191K5NGS`.	2 years	Analytics
Device storage
`willifit_cookie_consent`	Willifit — `localStorage`	Records whether you accepted or rejected analytics and when you decided. Without it we would have to interrupt you on every page, and we could not honor a "no."	Until you clear site data	Necessary
`willifit_last_city`	Willifit — `localStorage`	The slug of the last city you looked at, so a return visit opens where you left off instead of asking again.	Until you clear site data	Necessary
`willifit_last_center`	Willifit — `localStorage`	The map's last center point and zoom level, read before anything else loads so the map draws your area immediately rather than flashing the default national view first.	Until you clear site data	Necessary
`willifit_map_layer`	Willifit — `localStorage`	Whether you chose the street or the satellite base layer, so the map opens in the view you picked.	Until you clear site data	Necessary
`willifit_saved_spots`	Willifit — `localStorage`	The list of locations you starred as favorites. This is the only copy — there is no account, so your favorites exist on this device and nowhere else.	Until you clear site data	Necessary
`willifit_vehicle_height_in`	Willifit — `localStorage`	Your vehicle's height in inches, if you set one. It's what drives the fits / tight / won't-fit verdict on every location, so we keep it rather than making you retype it each trip.	Until you clear site data	Necessary
`willifit_zip_cache`	Willifit — `localStorage`	ZIP codes you've looked up and the coordinates they resolved to. Cached so a repeat lookup is instant and so we don't hammer OpenStreetMap's free geocoding service with the same question twice.	Until you clear site data	Necessary
`willifit_report_queue`	Willifit — `localStorage`	A local copy of the clearance reports you've submitted, held so a dropped connection or a dead spot never loses your report. You can export the queue from the app.	Until you clear site data	Necessary
`willifit_issue_queue`	Willifit — `localStorage`	The same offline safety net for "Report an issue" submissions — a pin in the wrong place, a closed garage, a wrong name.	Until you clear site data	Necessary
`willifit_new_location_queue`	Willifit — `localStorage`	The same offline safety net for new locations you've submitted that aren't in the database yet.	Until you clear site data	Necessary
`willifit_ad_impression` `willifit_ad_click`	Willifit — `localStorage`	Counters for which sponsored cards this browser has already seen and clicked, capped at the most recent 500 of each, used to rotate sponsors fairly instead of showing you the same one forever. These logs stay on your device; they are not uploaded, and they are not used to build a profile of you or to target ads at you.	Until you clear site data	Necessary
`willifit_admin_pw`	Willifit — `sessionStorage`	Only ever set on `/admin.html`, the password-gated page the site operator uses to review incoming reports. If you are reading this as a visitor, you will never have this one. That page carries no analytics at all.	Until the browser tab closes	Necessary

Cloudflare Web Analytics sets no cookies

Willifit also runs Cloudflare Web Analytics, which counts page views and page-load timings. It is genuinely cookieless: it sets nothing on your device, does no fingerprinting, and cannot follow you to another site. That is why it does not appear in the table, and why it keeps running regardless of your cookie choice — there is nothing to consent to.

Why the distinction matters

People use "cookies" as shorthand for anything a site keeps on your machine, and the law mostly does too — the EU rules cover storing or reading any information on your device, cookie or not. But the same rules carve out an exemption, and it is a sensible one:

Strictly necessary and functional storage does not require consent. If you ask for a thing and the site has to remember something to give it to you, remembering it is part of doing what you asked. Saving your vehicle height so the fit verdicts work, keeping your favorites, holding a report until the network comes back, and recording that you said "no" to analytics all fall here. Asking permission to remember your own preference would be theater.
Analytics cookies do require consent in the EU, UK, EEA, and Switzerland, because measuring your behavior is something we want, not something you asked for. That is why the two _ga cookies are the only entries in the table you can switch off — and why, if you're in one of those regions, they are not set at all until you say yes.

Outside those regions, most U.S. state privacy laws take the opt-out approach instead: analytics may run by default, but you must be able to turn it off easily and permanently. So that's what we do — the same control, available to everyone, whichever way your local rules point.

We are describing how we've set this up, not making a legal claim about any particular statute. If you think we've drawn a line in the wrong place, tell us.

How to withdraw consent

Any of these works, and none of them breaks the site.

Use the Cookie preferences control

Every page has a Cookie preferences button in the footer. Open it and choose Reject. Google Analytics stops setting and reading its cookies from that moment on. Your choice is stored in willifit_cookie_consent on that device, and you can change your mind as often as you want — there's no cooling-off period and we won't re-ask you every visit to wear you down.

Because the choice lives on your device, it applies to that browser on that device. If you use Willifit on a phone and a laptop, set it in both.

Send Global Privacy Control

Global Privacy Control is a signal your browser can send automatically on your behalf so you don't have to hunt for an opt-out on every site. Firefox supports it natively; Brave and DuckDuckGo send it; there are extensions for Chrome and Safari. If we receive it, we treat it as an opt-out from analytics without you doing anything else.

Delete what's already there

Opting out stops new cookies; it does not reach back and erase ones already set. To clear those, delete cookies for willifit.ai in your browser settings. Be aware that "clear site data" is usually all-or-nothing — it will also wipe the device storage in the table above, including your favorites, your saved vehicle height, and any report still sitting in a queue. Export anything pending first.

Block it at the source

Google publishes a Google Analytics Opt-out Browser Add-on that blocks Google Analytics everywhere, not just here. Most content blockers do the same. Your browser's own settings can also block third-party cookies wholesale or discard everything when you close a private window.

Changes to this policy

If we add, remove, or repurpose anything on this page, we update the table and move the "Last updated" date at the top. If a change means new analytics or a new third party gets access to your data, we'll ask again rather than assume an old yes still covers it.

Questions

Email privacy@willifit.ai. For the wider picture — what we collect, who processes it, and your rights over it — see the Privacy Policy.