Cookie policy
This page says what cookies Interlink Wallet uses. It matches the software, not a generic template.
Marketing site
wallet.interlink.digital does not set cookies. There are no analytics or advertising trackers. Fonts, scripts and images are served from this origin only. The contact form stores a one-way hash of your IP address on the server. That is not a cookie.
Console
console.wallet.interlink.digital sets one essential session cookie so you stay signed in.
- Name. iw_session
- Purpose. Keep you signed in after a passkey, authenticator code or recovery code
- Contents. An opaque random token. The database stores a hash, not the token
- HttpOnly, Secure, SameSite=Lax. Not readable by JavaScript. HTTPS only
- Lifetime. Idle 30 minutes, absolute 12 hours from sign-in
- Analytics or advertising. None
A CSRF token travels in the page and in forms. It is not used to track you. A tenant switcher cookie, iw_tenant, remembers which organisation you last opened. It holds a public id only.
Add-to-wallet pages
Pass landing pages do not use advertising cookies. See the holder privacy notice.
Changes
If this changes, this page and the privacy notice change on the same day.