Wavio Website and Cookie Notice
Version: Beta 0.9.1 working update Effective date: Not effective — publication pending
1. Scope
This notice applies to the public Wavio website at wavio.no. Wavio is operated by PREKAS AS, organisation number 938 307 385, at Onsøyveien 68, 1614 Fredrikstad, Norway.
Contact: support@prekas.app
2. Current website boundary
At the verified Beta 0.9 boundary, the website provides information pages. The proposed https://wavio.no/updates/ page also submits Product Updates subscription and withdrawal requests to a same-origin Cloudflare Worker. PREKAS AS does not intentionally use product analytics, advertising trackers, tracking pixels, behavioural profiling or non-essential cookies on these pages.
A read-only check on 30 August 2026 found no first-party or third-party Set-Cookie response, no cookie created during ordinary requests to the home or Privacy pages, and no analytics or advertising script in the delivered HTML. This is a point-in-time verification, not a promise that an infrastructure provider can never process ordinary request metadata.
3. Cloudflare delivery and security
Cloudflare delivers and protects the website. When you request a page, Cloudflare and PREKAS AS may process ordinary connection and security information such as IP address, requested URL, time, browser/network information, response status and security signals. Cloudflare may use strictly necessary technical mechanisms when required to provide security, routing or abuse protection.
This processing is used to deliver the requested page, maintain security and availability, diagnose faults and prevent abuse. The intended legal bases are performance of the requested service and PREKAS AS's legitimate interests in operating a secure and reliable website, subject to data minimisation and the Wavio Privacy Policy.
For the Product Updates form, the application does not store IP address, user agent or request/query logs. It stores the minimum email, consent, confirmation and withdrawal evidence described in the Wavio Privacy Policy in an EU-jurisdiction Cloudflare D1 database. Cloudflare's infrastructure still processes ordinary edge and security metadata. Worker observability must remain disabled or limited to non-personal aggregate operational evidence unless this notice and the underlying assessment are updated.
4. No consent banner at the current boundary
Because the verified website does not use non-essential cookies or similar tracking technologies, Wavio does not currently display a cookie-consent banner. A banner that offers a choice which does not correspond to actual processing would not improve transparency.
If PREKAS AS later proposes analytics, advertising, personalisation, embedded third-party media or another non-essential storage/access technology, it must first:
- document the exact provider, purpose, data, duration and recipients;
- assess whether prior consent is required;
- prevent the technology from loading before valid consent where required;
- provide an equally accessible refusal and withdrawal control; and
- update this notice, the Privacy Policy, provider register and relevant store disclosures before activation.
5. Your choices and rights
You may use browser controls to view or remove locally stored website data. Blocking strictly necessary mechanisms may prevent security or delivery features from working.
For privacy questions or requests, contact support@prekas.app. Further information about purposes, providers, transfers, retention and GDPR rights is available in the Wavio Privacy Policy.
6. Changes
This notice identifies its version and effective date. Material changes will be communicated appropriately. The website must be rechecked whenever its hosting, security configuration, scripts, embedded content or analytics boundary changes.