Preview: wellknown.id is in development and isn’t live yet
Cookie policy
This site sets no cookies. The sign-in service uses only what it strictly needs to sign you in, and nothing to track you. The law doesn’t ask for consent to that, so we don’t make you click through a banner.
| Stored | Where | Why | How long |
|---|---|---|---|
wellknown-id:theme | Your browser’s local storage, only if you use the UV lamp switch | Remembers whether you chose the UV lamp. Never sent to us. | Until you clear it |
No cookies, no analytics and no third-party content.
When the sign-in service at wellknown.id is live, signing in stores the following in your browser. All of it is strictly necessary to provide the sign-in you asked for, and none of it is used to recognise you: our server keeps no record of who signed in where.
| Stored | Type | Why | How long |
|---|---|---|---|
| How this browser reaches your wellknown.id | IndexedDB, on wellknown.id | Which passkey opens your wellknown.id, and your keyring, sealed under it. Where this browser can’t use a passkey, your wellknown.id itself, kept here. Never sent to us. | Until you choose “Forget wellknown.id on this browser”, or clear site data for wellknown.id |
| Your wellknown.id, open | IndexedDB, sealed with a key this browser can’t export | After you use your passkey, so the next sign-in doesn’t ask for it again straight away. | 10 minutes |
| Keys for the sites you signed in to | IndexedDB, keys this browser can’t export | Each site’s key, for the persona you used there, so your passkey isn’t asked again at that site. They can sign in to their one site, and can’t be read out. | 12 hours from the sign-in |
| Which persona you used where, and sign-ins not yet filed | IndexedDB, on wellknown.id | So the sign-in page offers the persona you used at a site before. A sign-in made while your wellknown.id wasn’t open waits here until it can be added to your own encrypted records. | Until you clear it; sign-ins until they’re filed |
_interaction, _interaction_resume | Cookies, HTTP-only | Tie the steps of one sign-in together while you prove your key: a random number, nothing about you, sent only to that sign-in’s own addresses. | Deleted as soon as you’ve proved your key; 10 minutes at most |
Each of the two cookies has a companion ending in .sig. It carries a signature that lets the service detect tampering, and it lasts exactly as long as the cookie it protects.
There are no other cookies: no session cookie, and nothing that notes which key you used at which site. Cookies the sign-in service set before 2 October 2026 (wkid_session, wkid_signins and _session) are deleted the next time your browser visits.
You can clear any of this from your browser’s settings at any time: site data for wellknown.id removes all of it together, or use “Forget wellknown.id on this browser” on any sign-in page or at wellknown.id/you. Your passkey, or a persona’s recovery code, brings your personas back; where this browser kept your wellknown.id itself and you have no recovery code, clearing it loses that persona, and the sites that knew you by it won’t recognise you.
More about how we treat data: privacy policy.
Last updated 2 October 2026.