The complete list of cookies this site sets. There are three, all of them strictly necessary, and none of them tracks you.
Last updated 15 September 2026.
Under the Privacy and Electronic Communications Regulations (PECR), consent is required for cookies that are not strictly necessary to provide the service you asked for. WatchTower does not set any such cookie. There is no analytics cookie, no advertising cookie, no social-media pixel and no third-party tracker anywhere on watchtowerai.co.uk or in the console, and the site loads nothing from any other website.
That is why there is no consent banner. A banner asking permission for cookies that do not exist would be theatre, and it would train you to click through the ones that matter. The console does not store anything else in your browser’s local storage for tracking.
| Name | Purpose | Set when | Lifetime |
|---|---|---|---|
csrf_token |
Blocks cross-site request forgery. The value is echoed back by the console on every state-changing request and compared with the cookie; without it, a malicious site could make your browser act on your account. | On your first page view, before you log in. | Until you close the browser, or 8 hours once you are signed in. |
access_token |
Your signed-in session. It is what keeps
you logged in as you move between console pages. Marked
HttpOnly, Secure and
SameSite=Strict, so scripts cannot read it and it is
never sent to another site. |
When you sign in. | 8 hours, or until you sign out. |
wt_consent |
Records a cookie preference if you ever submit one. Because we operate no optional cookies, it currently enables and disables nothing; it exists so that a preference you express is remembered rather than lost. | Only if you submit a preference. Never set automatically. | 12 months. |
We count nothing about you in your browser. Our web server keeps ordinary request logs (URL, timestamp, response code, IP address) for security and troubleshooting, described in the privacy notice. Those are server-side logs, not cookies, and they are not used to build a profile or to advertise.
You can block or delete cookies in your browser settings. If you block
csrf_token or access_token you will not be able
to sign in — they are the mechanism by which signing in works, which is
precisely why they are classed as strictly necessary and why we do not
ask permission for them.
The WatchTower agent installed on your endpoints uses no cookies at all. It authenticates with a signed key, not a browser session.
Questions: the contact form or info@nikah-ai.com.
WatchTower is a trading name of Nikah AI Ltd, Company No. 17199968, registered office Office 1216, 60 Tottenham Court Road, London W1T 2EW. We are registered with the Information Commissioner's Office under registration number ZC176381. You can complain to the ICO at ico.org.uk, though we would rather you told us first.