Home  /  Legal  /  Cookies Policy
Legal · effective 28 April 2026

Cookies Policy

How Healthdev OÜ (t/a WinGrants AI) uses cookies and similar technologies on wingrants.ai and the WinGrants platform — under Article 5(3) of the ePrivacy Directive, the Estonian Electronic Communications Act, the GDPR, and EDPB Guidelines 03/2022.

Effective date28 April 2026
Last updated28 April 2026
Banner choiceAccept all · Reject all · Customise
Consent record retention24 months
GPC signalHonoured
Privacy Terms of Service Cookies Policy Disclaimer Trust & Security ↗
On this page
Overview 1. What is a cookie? 2. Categories of cookies 3. How we obtain consent 4. Third-party cookies & transfers 5. Browser controls 6. Do Not Track & GPC 7. Retention 8. Your rights 9. Changes to this Policy 10. Contact

This Cookies Policy explains how Healthdev OÜ (trading as WinGrants AI; “WinGrants”, “we”) uses cookies and similar technologies on wingrants.ai and the WinGrants platform. It supplements, and forms part of, our Privacy Policy.

We comply with Article 5(3) of the ePrivacy Directive 2002/58/EC, the Estonian Electronic Communications Act (Elektroonilise side seadus), the GDPR, and EDPB Guidelines 03/2022 on consent. Non-essential cookies are stored on your device only after you give freely-given, specific, informed, unambiguous consent via our cookie banner. You can change or withdraw consent at any time through “Cookie settings” in the website footer.

§1

What is a cookie?

A “cookie” is a small text file stored on your device when you visit a website. Cookies allow the site to recognise your device, remember preferences, and collect usage information. Similar technologies — pixels, local storage, SDKs, fingerprinting — are treated equivalently under EU law and this Policy.

We classify the technologies we use into the categories below.

§2

Categories of cookies we use

2.1 Strictly necessary (always active — no consent required)

Required for the site to function and to deliver a service you have requested. These cannot be switched off.

CookieProviderPurposeTypeDuration
wingrants_sessionwingrants.aiMaintains your authenticated sessionFirst-partySession
csrf_tokenwingrants.aiProtects against cross-site request forgeryFirst-partySession
cookie_consentwingrants.aiStores your cookie preferencesFirst-party12 months
__cf_bmCloudflareBot management and DDoS protectionThird-party30 minutes
lb_sessionwingrants.aiLoad-balancer routingFirst-partySession

2.2 Functional (consent required)

Remember your preferences and improve usability.

CookieProviderPurposeTypeDuration
wg_langwingrants.aiStores selected languageFirst-party12 months
wg_themewingrants.aiLight/dark mode preferenceFirst-party12 months

2.3 Analytics (consent required)

Help us understand how the site is used so we can improve it.

CookieProviderPurposeTypeDuration
ph_*PostHog (EU region)Product and web analytics, event trackingThird-partyUp to 13 months
_ga, _ga_*Google Analytics 4 (if used)Aggregated traffic analytics, IP-anonymisedThird-partyUp to 14 months
Vercel Web AnalyticsVercelPrivacy-friendly page analyticsFirst-partyNone / fingerprint hash

2.4 Marketing (consent required)

Used to measure and target marketing campaigns.

CookieProviderPurposeTypeDuration
_fbp, frMeta (Facebook)Conversion measurement, remarketingThird-partyUp to 90 days
li_at, bcookie, lidcLinkedIn Insight TagB2B campaign measurement, retargetingThird-partyUp to 24 months
_gcl_*Google AdsConversion trackingThird-partyUp to 90 days
The exact set of cookies in each category may change over time as we add or remove tools. The most current list is always shown in the Cookie Settings preference centre.
§3

How we obtain consent

When you first visit wingrants.ai, a cookie banner is shown with three options of equal prominence:

  • Accept all
  • Reject all
  • Customise — granular choice per category

No non-essential cookies are set until you make a choice. Pre-ticked checkboxes are not used. Continued browsing is not treated as consent.

You can revisit your choices at any time via the “Cookie settings” link in the footer or by clearing your cookies and reloading the page.

§4

Third-party cookies & international transfers

Some cookies are set by third parties (Google, Meta, LinkedIn, etc.). When set, they may transmit data outside the EEA. We rely on:

  • adequacy decisions (e.g., EU–US Data Privacy Framework for certified providers);
  • Standard Contractual Clauses + supplementary measures;
  • our cookie banner consent for the underlying processing.

A list of third-party recipients and their privacy policies is shown in the Cookie Settings preference centre.

§5

Browser controls

You can also manage cookies through your browser settings. Each browser is different — see:

  • Chrome: support.google.com/chrome/answer/95647
  • Firefox: support.mozilla.org/kb/clear-cookies-and-site-data-firefox
  • Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
  • Edge: support.microsoft.com/microsoft-edge

Disabling strictly necessary cookies will break parts of the Service.

§6

Do Not Track & Global Privacy Control

We honour the Global Privacy Control (GPC) signal where transmitted: when GPC is detected, non-essential cookies are not set and any prior consent is withdrawn for the remainder of the session. Browsers’ generic “Do Not Track” header is not a recognised standard and is treated for information only.

§7

Retention

Cookie durations are listed per row above. Consent records (showing what you accepted, when, and how) are retained for 24 months for audit and accountability purposes (Art. 5(2) and 7(1) GDPR).

§8

Your rights

Under GDPR, you have rights of access, rectification, erasure, restriction, portability, and objection in relation to data collected via cookies. See our Privacy Policy §12 for details, or contact aj@wingrants.ai.

You may also lodge a complaint with the Estonian Andmekaitse Inspektsioon (https://www.aki.ee) or your local supervisory authority.

§9

Changes to this Policy

We may update this Cookies Policy when we add or remove cookies or change processing. Material changes are notified via the cookie banner and require renewed consent for new categories.

§10

Contact

Healthdev OÜ (t/a WinGrants AI) — aj@wingrants.ai
Männimäe/1, Pudisoo küla, Kuusalu vald, Harju maakond, 74626, Estonia
Registry code: 14588534

← Privacy Policy Terms of Service → Disclaimer → Trust & Security ↗