Necessary access
Secure cookies protect restricted Reader Vault pages.
Current configuration
Necessary access, browser-saved tools and region-specific privacy controls.
Reader Vault access requires secure first-party cookies. The Reading Planner and Shop cart may use local storage. Google privacy messages manage advertising choices on pages carrying AdSense code. No Pinterest Tag or Pinterest advertising pixel is loaded on this website.
Local tool state
Reading plans and cart contents can remain in the browser.
Google consent
Region-specific messages control advertising choices.
No Pinterest tracking
Pinterest remains an external social link only; no Pinterest Tag is loaded.
01
Scope
This policy covers cookies and similar browser technologies used on wonders-workshop.com. Similar technologies include local storage, tags, pixels and consent records that can store information or recognise a browser or device.
02
Strictly necessary first-party cookies
Reader Vault access
__Host-tbc_book_one and __Host-tbc_book_two are secure, HttpOnly cookies set after a valid printed reader code is accepted. Each contains a signed access token rather than the printed code or contact details and expires within 90 days.
Abuse protection
__Host-tbc_attempts temporarily records signed failed-attempt and lockout information to protect restricted archives from repeated guessing. It expires within approximately 30 minutes.
03
Local storage used by tools and the Shop
ww_reading_planner_v1 may store the series title, dates, reading pace and book page counts entered into the Book Series Reading Planner. ww_fourthwall_cart_v1 may store selected Fourthwall variant IDs, quantities, display names, prices and image URLs for the Shop cart.
These records stay in the visitor's browser and are not submitted to Wonders Workshop. They remain until cleared through the relevant interface or browser controls.
04
Cloudflare delivery, security and analytics
Cloudflare provides hosting, content delivery, security and privacy-first aggregate Web Analytics. Network security systems may use short-lived technical cookies or identifiers when needed to protect the site. Cloudflare Web Analytics itself is configured to measure aggregate usage without traditional analytics cookies or cross-site visitor tracking.
05
Google AdSense and Privacy & Messaging
Selected Journal and tool pages load Google AdSense code. Google and its advertising partners may use cookies, local storage or similar technologies for consent records, ad delivery, frequency control, fraud prevention, measurement and—where the visitor allows it—personalisation.
The exact cookie names and duration can vary by region, consent choice, advertising provider and changes to Google's systems. Google's European regulations message offers “Consent,” “Do not consent” and “Manage options.” Supported US-state visitors receive a “Do Not Sell or Share My Personal Information” control.
AdSense code is not intentionally loaded on the Shop, books, collections, Black Archive, bonus pages or legal pages. A Google privacy-settings link appears where the Google privacy API is active.
07
Your controls
Use “Privacy and cookie settings” on eligible advertising pages to revisit Google choices. The Reader Planner includes a reset control, and Shop cart items can be removed from the cart. Browser settings can inspect, block or delete cookies and local storage.
Blocking or deleting Reader Vault cookies requires the valid printed code to be entered again. Clearing local storage removes saved reading plans and Shop cart contents.