WholesaleOSCookie Notice
APAI LLC · Effective October 1, 2026 · One session cookie. No advertising or analytics trackers.
Cookies we set
- wos_session — keeps you signed in and carries your session token. Strictly necessary: the service cannot work without it. httpOnly, same-site, expires when your session ends. It contains a signed token, not your password or your card details.
Cookies set by Stripe on our pricing page
Our pricing page loads Stripe's script so that a payment can be started and so that Stripe can assess fraud signals. Loading it causes Stripe to set its own first-party cookies on our domain, before you go anywhere near a payment form:
- __stripe_mid — a randomised identifier used by Stripe to recognize a device across visits, so that fraud can be detected and legitimate customers are not repeatedly challenged. Set by Stripe; lasts up to one year.
- __stripe_sid — a short-lived session identifier used for the same purpose. Set by Stripe; lasts about 30 minutes.
Map tiles
When you open a page that shows a map, the map images are loaded from CARTO's tile service, which necessarily receives your IP address and browser details in order to return the image. We do not send CARTO anything about you or your account. This is listed on our Sub-processors page.
What we do not use
Local storage
The app stores a small amount of preference data in your browser's local storage — for example your timezone and display preferences. This stays in your browser, is not sent to third parties, and is not used to track you.
Server-side records
Separately from cookies, our servers log requests: IP address, user agent, the page or API route requested, and the time. We use these logs for security, to detect abuse, to keep an audit trail of account activity, and to meet our legal obligations. Retention is described in our Privacy Policy.
Third parties on our payment page
When you pay, you are on a page hosted by Stripe and you are subject to Stripe's own cookie and privacy practices. Stripe uses cookies and device signals to process the payment, to authenticate you with your bank where 3-D Secure applies, and to detect fraud. We do not control those cookies; see Stripe's privacy policy for detail.
Blocking cookies
You can block or delete cookies in your browser settings. If you block the session cookie you will not be able to sign in, because it is the mechanism that keeps you signed in. Blocking cookies does not affect your ability to read our public pages, including this one.
Contact
Questions about this document: support@wholesaleos.shop.