How Woodware handles your details
This website has no analytics, advertising or tracking of any kind. This page explains what information is kept and who handles it.
Your enquiry stays private until you send it
Until you send your enquiry, the products and quantities in your cart, and your name, organisation, city, phone number, email address and anything you write in the message box, are kept on the phone or computer you are using.
When you press “Get a quote”, WhatsApp opens with a message to Woodware and a link to your cart. To make that link, we store a copy of the products and quantities behind a short code. Nothing about you reaches us until you send the message yourself. The same is true if you choose to send it by email instead.
If this website sends a request for you, it sends Woodware your name, organisation, city, phone number or email address, your note and a link to the cart. If you give a phone number, we first confirm it with a 6-digit code sent on WhatsApp, so we do not reply to a wrong number. We do not keep the code. We keep the request until we have answered it, and you can ask us to delete it at any time.
You can print or share your cart without filling in any of the fields.
What is saved before you sign in
Your cart and your lists are saved on the phone or computer you are using, under woodware:enquiry-lists:v1, so they are still there when you come back.
While a page is open, the website also keeps two things for that tab only: woodware:client-id, a random identifier that keeps two open Woodware pages in step, and woodware:configuration-change, which option you just chose, so the next page can say what changed with it. After you sign in, it saves woodware:synced-through, a number that says how much of your cart and lists your account already has.
None of these is sent anywhere by itself. If you clear the saved Woodware website data from your phone or computer, all of them are removed, along with any cart or list your account does not hold.
What we store when you sign in
We use your phone number to sign you in. We pass it to Supabase, which manages our accounts, and Meta's WhatsApp Cloud API sends you the 6-digit code on WhatsApp. We do not store the code.
Once you are signed in, your cart and your lists follow your account to every device you sign in on. We store them with your account: each list's name and, for the cart and every list, the products' codes, names, listed prices, photograph addresses and quantities. We do not store any other details about you.
Google sign-in is not available at the time of writing. If it is enabled, Google will give us only the email address connected to that account.
Share links
When you share a list, we store its products and quantities behind a short code. Anyone you send the link to can open the list without signing in.
The link shows the list as it is now: when you change the list, the link changes with it. When you stop sharing it, or delete the list, the link stops working and says the list is no longer shared.
The link Woodware receives with a quote is different: it is a fixed copy of what you sent, so the quotation matches what you asked for. It does not change and does not expire by itself. Please write to us if you want it removed.
If you named the list, the name appears in the link so you can recognise it, for example woodware.in/l/reception-chairs-K7M2QP9. The name is not stored with the link; it is only in the address you copy and share. A share link contains no contact details and nothing about who made it.
Cookies
We use three cookies, all for signing in. woodware-auth keeps you signed in as you move between pages. woodware-auth-phone remembers for a few minutes which phone number received the code, so the next screen can check it. woodware-signed-in holds nothing but the fact that you are signed in, so pages can show your cart and lists without asking the server first.
There are no advertising cookies, analytics cookies or cookies from anyone else. This website does not include anything that would set them.
Stopping abuse
To prevent repeated requests for sign-in codes or share links, we count requests from each connection. We do not store your IP address. It is combined with the date and a secret value to create a one-way fingerprint. The fingerprint cannot be changed back into an IP address, and it changes every day.
Who else is involved
Supabase manages accounts and stores your cart, your lists and share links. Meta's WhatsApp Cloud API delivers sign-in codes. Shopify holds the product catalogue used by this website. Vercel hosts the website. Google provides the two maps on our contact page and, when it is enabled, Google sign-in.
These are the only other organisations involved. We do not send your details to anyone for their own purposes, and we do not share anything with advertisers.
What you can do
You can delete any list from your lists page, and empty your cart at any time. You can also delete your account from your account page, which removes the account, your cart and every list saved to it, and stops every link you shared.
You can remove what is saved on your phone or computer at any time by clearing the saved data for this website.
If you want to know what information we hold about you, or want us to remove it, please write to us.