Effective 20 September 2026. This page states what WURUS writes to your device or reads from it, for what purpose, for how long, and how you can object. It answers article 61 of Senegalese law 2008-12 of 25 January 2008 on the protection of personal data, which requires us to tell you both, and whose application is supervised by the Commission de protection des données personnelles (CDP).
What this covers, and why "cookie" is the wrong word
The law does not mention cookies. It speaks of "accessing, by electronic transmission, information stored in your terminal equipment, or writing information into that equipment by the same means". A cookie is one case of that; your browser's local storage is another, equally covered. This page covers both, and names them.
Strictly necessary, and not switchable
Article 61 exempts whatever has "the exclusive purpose of enabling or facilitating electronic communication" or is "strictly necessary to deliver an online service at the user's express request". They are listed anyway, because telling you what is set costs nothing and you will see them in your browser.
| Name | Set by | What it does | Lifetime |
| wurus_app_session | WURUS | Keeps your session from one screen to the next. | End of session |
| XSRF-TOKEN | WURUS | Stops another site from acting in your name on ours. | End of session |
| wurus_traceurs | WURUS | Remembers your choice on this page. It is the only one that exists because you refused something. | 12 months |
| wurus_lang, wurus_country | WURUS (local storage) | Your language and country, so we stop asking. | Until cleared |
| cart_items, front_auth_token | WURUS (local storage, stores) | Your basket and your shopper session on a merchant's store. | Until cleared |
| __cf_bm, cf_clearance | Cloudflare | Tells a visitor from a bot at the network edge. Without them the service is open to automated attack. | 30 minutes to 30 days |
Audience measurement, which you may refuse
It tells us what is read, what is searched for and what is abandoned, so we can fix what does not work. It is on by default, and the notice that greets you says so. You may refuse it at any time through the "Cookies" link in the footer.
| Name | Set by | What it does | Lifetime |
| _ga, _ga_<id> | Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, United States | Google Analytics 4: tells visits apart, counts page views, measures where visitors come from. | 13 months |
| wurus.vid | WURUS (local storage) | A visit identifier, so one article read is counted once. | Until you object |
| wurus.attr | WURUS (local storage) | The source you arrived through (campaign, search engine, link). | 30 days |
| Measurement beacon | Cloudflare, Inc., San Francisco, California, United States | Traffic measurement at the network edge. It sets no cookie, but it does receive your IP address. | No storage |
| Product usage measurement | WURUS, on its own infrastructure | Which features are used. Switched off today; it is listed because it can be switched back on, and would run under the same rules. | Not applicable |
Two recipients are established in the United States, which is a transfer outside Senegal under article 49 of law 2008-12. It is declared as such to the CDP and relies on those providers' standard contractual clauses. If this matters to you, refusing audience measurement is enough to prevent it: nothing is then sent.
Session recording, which you may refuse separately
It records the layout of the screen and your gestures, to understand a journey that fails, a form left unfinished, a button nobody finds. It is not a video of your screen: it is the page's changes, replayed.
Three guarantees, and they do not rest on your trust but on the configuration: everything you type is masked, everywhere and without exception, passwords, addresses and numbers included; inside the application and on invoice pages displayed text is masked too, so a recording shows layout and gestures rather than data; and on pages whose address carries an access token to a document, that address is never sent, only the kind of document.
This feature is switched off today. It has its own row in the preferences panel, and refusing audience measurement refuses it as well.
Third parties that receive your IP address without writing anything
Some public pages, invoices and wallets, load fonts and icons from Google and Iconify servers. No cookie is set, but displaying a file means requesting it, and requesting it reveals your IP address to the server that serves it. Online payment loads the relevant payment platform's script in the same way, and that script then sets its own technical cookies, for example __stripe_mid.
How to object, in practice
- On this site: the "Cookies" link in the footer opens the preferences panel. Your choice is remembered, and it applies to this browser on this device.
- What refusing actually does: measurement scripts are not merely disabled, they are not loaded at all. Cookies already set are erased, and our own servers stop emitting events about you too.
- In your browser: you can refuse or clear cookies in its settings. The service still works, but since the strictly necessary cookies in the first table are refused along with the rest, you will be signed out and some pages will stop working.
- If you change your mind: the same link reopens the panel, in both directions.
Our customers' stores
Merchants using WURUS publish their store on a subdomain of ours. Everything described on this page is set there by us, not by the merchant, and the preferences panel is available there as it is here. If a merchant adds trackers of their own to their store, they answer for those themselves, and their own notice tells you about them.
This document changes when the product changes
A tracker added, a lifetime changed, a new recipient: this page is updated, and its effective date with it. It complements our privacy policy, which describes all processing, and our terms of service.
Contact
A question about this page, or to exercise your rights of access, rectification, erasure and objection under law 2008-12: [email protected]. You may also refer the matter to Senegal's Commission de protection des données personnelles.