Cookie notice
Two small cookies, both of them essential, and nothing that follows you around the web.
This page is the full account of what I store in your browser when you visit Wondersandtales. I set two cookies: one to remember your consent choice, and one short session cookie so the forms on this site cannot be forged. I do not run analytics, advertising pixels or social trackers.
Scope
What this notice covers
This notice is effective from 2026 and applies to wondersandtales.eu. It describes the cookies I place, why they exist, how long they last, and how you can refuse them. It sits beside the privacy notice, which explains the name, e-mail and message content I keep when you subscribe or write to me.
A cookie is a small text file that a site asks your browser to hold. Some cookies are needed for a page to remember a choice or to keep a form honest; others are used to measure audiences or to sell advertising. I use only the first kind. There is no measurement script on these pages, no advertising network, and no third-party tag that would set its own cookies while you read.
I wrote this in the same voice I use everywhere else on the site because the choice is mine and the responsibility is mine. If a cookie appears on this domain that is not listed in the table below, that is a mistake, and I want to hear about it at hello@WondersAndTales.eu so I can take it off.
You can read without creating an account. Visiting the Story Shelf, the plans page or a letter from the desk does not require a cookie of any kind. The consent cookie is written only when you press a button on the banner. The session cookie is written when PHP starts a session, which happens when a form needs protecting.
The list
Cookies I actually set
These are the only cookies used on Wondersandtales. Both are first-party cookies on this domain. Neither is shared with another company. Names, purposes and lifetimes match the working site, not a template.
| Name | Purpose | Duration | Type |
|---|---|---|---|
wt_consent |
Stores your choice from the cookie banner: that you accepted cookies, or that you asked for essential cookies only. I read it so the banner does not keep returning on every page. | 12 months from the day you press the button | Essential |
PHPSESSID |
Keeps a short server session so I can protect the subscribe and contact forms with a token, remember a rate limit, and stop automated posts. It is not used to profile you or to stitch visits together over days. | Session only — it ends when you close the browser | Essential |
No advertising cookies. No analytics cookies. No third-party cookies. I do not set a cookie to remember which story you last opened, and I do not drop a cookie when you follow a link in an instalment.
The banner
How consent works on this site
The first time you arrive, a bar at the bottom of the screen offers two choices: Accept, and Only essential. Both buttons write wt_consent for twelve months and then hide the bar. A link in that bar brings you to this page.
Accept and Only essential do the same practical work here, because I do not load any non-essential cookie. I still offer both labels so the choice is visible and so a later change — if I ever added a measurement tool — would have a place to live. Until that day, which has not come in 2026, either button simply records that you have seen the notice.
The banner sits above the safe area on a small screen so it does not cover the primary button in a form. It is not a wall; you can scroll and read while it is open. If JavaScript fails, the bar still appears when the consent cookie is missing, because the server checks for it before drawing the page.
I do not treat silence as consent. If you leave the bar untouched, I still do not set advertising or analytics cookies, because those scripts are not on the page at all. The only extra file that appears after you choose is wt_consent itself.
Refusal
How to refuse, and what actually breaks
Nothing on the reading side of the site depends on a tracking cookie, because I do not use one.
Press Only essential on the banner if you want a record that you declined anything beyond the two cookies in the table. The banner will hide. Stories, plans, letters and this notice remain fully readable. Illustrations still load. The map on the contact page still embeds, because that iframe does not require a cookie from me.
If you block all cookies in the browser, the banner will come back on the next visit, because I have no way to remember that you have already seen it. That is the only thing that breaks. Forms may also fail to send if the session cookie cannot be stored, because the token that stops forged posts lives in that session. In that case, write to me at hello@WondersAndTales.eu instead of using the form.
I do not lock articles behind a cookie wall. I do not reduce the type size, hide the rail, or stall images until you click. A refusal is a preference I can honour without punishing the reading.
Your browser
Deleting cookies and changing your mind
You can clear wt_consent and PHPSESSID from your browser’s site data panel at any time. After that, the banner will show again on the next page load, and a new session will start if you open a form.
Most desktop browsers keep site cookies under a privacy or history menu. On a phone, the same controls live in the browser settings, not in a menu on this page. I do not ship a second banner or a preference centre, because there are only two cookies and both are essential to the jobs described above.
If you use a private window, the session cookie dies when the window closes, which is the behaviour I want. The consent cookie may or may not persist, depending on how your browser treats site data in that mode. Either way, I do not gain a longer memory of you than the table states.
Should I ever add a cookie that is not essential, I will name it on this page, give it a purpose and a lifetime, and put a real extra choice on the banner before it is written. Until then, this list is complete.
Others
Third parties, fonts and the map
I do not claim analytics I do not run. There is no Google Analytics property, no Meta pixel, no hotjar-style recording, and no affiliate cookie on these pages.
Type is loaded from Google Fonts with a single stylesheet. That request goes to Google’s font servers so Outfit and Newsreader can render. I do not read a report from that request, and I do not combine it with your subscription address. If you prefer not to call those servers, a system font stack is already declared as a fallback in the stylesheet.
The contact page includes a keyless Google Maps embed so you can see the Telok Ayer address. That iframe is served by maps.google.com. I do not pass your name or e-mail into it. If you do not wish to load the map, you can ignore that block; the street address, phone and hours are written in full beside it.
Mail that I send after a successful form is ordinary server mail. It does not plant a cookie in your inbox. Opening an instalment in a webmail client is governed by that client, not by a file I set on this domain.
Afterword
Changes to this notice, and how to reach me
If the cookies on this site change, I will update the table on this page and the date below. I will not hide a new tracker behind an old consent. For questions about cookies, privacy or a deletion request, write to the reading desk.
Wondersandtales, 27 Boon Tat Street, #04-02, Telok Ayer, Singapore 069623. Phone +65 6396 7452. E-mail hello@WondersAndTales.eu. Reading desk Monday–Friday, 10:00–18:00 SGT. This cookie notice is effective in 2026.