Cookies

Cookie policy

Last updated 25 September 2026

This page says what cookies Interlink Wallet uses. It matches the software, not a generic template.

Marketing site

wallet.interlink.digital does not set cookies. There are no analytics or advertising trackers. Fonts, scripts and images are served from this origin only. The contact form stores a one-way hash of your IP address on the server. That is not a cookie.

Console

console.wallet.interlink.digital sets one essential session cookie so you stay signed in.

  • Name. iw_session
  • Purpose. Keep you signed in after a passkey, authenticator code or recovery code
  • Contents. An opaque random token. The database stores a hash, not the token
  • HttpOnly, Secure, SameSite=Lax. Not readable by JavaScript. HTTPS only
  • Lifetime. Idle 30 minutes, absolute 12 hours from sign-in
  • Analytics or advertising. None

A CSRF token travels in the page and in forms. It is not used to track you. A tenant switcher cookie, iw_tenant, remembers which organisation you last opened. It holds a public id only.

Add-to-wallet pages

Pass landing pages do not use advertising cookies. See the holder privacy notice.

Changes

If this changes, this page and the privacy notice change on the same day.