Join the beta

Service terms

Last updated 6 October 2026

These terms are a working draft and will be reviewed by a solicitor before we take on paying clients.

The agreement

These terms apply when Webwax Ltd, a company registered in England and Wales (company number 08125321), which runs the FortuneCookies service at fortunecookies.cloud (“we”, “us”), provides that service to a business (“you”). Our agreement with you is made up of these terms, our data processing agreement (“DPA”), and the details we confirm with you by email before we start: the websites covered, the plan and the fees (the “order”). If they conflict, the order wins, then the DPA, then these terms. The service is for businesses, not consumers.

The service

For each website in the order we:

  • scan the website to find the cookies, similar technologies and trackers it uses, and sort them into categories;
  • prepare a cookie banner and a cookie policy for your approval;
  • provide the banner as a script that shows the banner, holds back the trackers we list until visitors agree, and passes visitors’ choices to Google Consent Mode;
  • record each visitor’s choice and keep those records for two years;
  • re-scan the website and update the cookie list when you ask us to, for example after you add a new tool.

On the Standard plan, we send you the code and instructions and you (or your web developer) add it to your website. On the Managed install plan, we add it for you and remove your previous cookie tool.

What you do

  • Approve before it goes live. You check the cookie list, the categories, the banner wording and the cookie policy, and approve them before we publish them, and again whenever they change. We record who approved what and when.
  • Tell us about changes. Let us know before you add new tools, plugins, embeds or tracking to your website, so we can re-scan. We can only hold back trackers we know about.
  • Keep the script in place. Keep our script installed as we instruct (first in the page’s <head>, or in Google Tag Manager as described), and don’t change it.
  • Give us accurate information, including the business name and contact details for your cookie policy.

You are the controller of the personal data processed through the service, and you are responsible for your website and the decisions you make about it, including which tools you use and the choices you approve.

No legal advice, no guarantee

The service is designed to help you meet the cookie and consent rules of the UK, the EU and Canada, but it isn’t legal advice and we don’t guarantee that your website complies with any law. Laws and regulators’ guidance change, and some websites need tailored advice. Our classification of cookies is based on public information about them and on what our scans find; please tell us if you know a cookie is used differently.

Access to your website (Managed install)

To install the service, we need access to your website, your content management system or Google Tag Manager. Please give us our own user account, or temporary access, rather than your own login. We will use the access only to install, test and remove things as agreed with you, won’t keep passwords after the work is done, and will tell you when we’ve finished so you can remove our access. Please make sure you have a current backup of your website before we start; we aren’t responsible for problems that already existed on it.

Fees and payment

The setup fee is due when we start. The monthly fee for each website is invoiced monthly in advance. Invoices are payable within 14 days. If an invoice is unpaid 14 days after we remind you, we may suspend the service after giving you a further 7 days’ notice. Fees are exclusive of VAT and any similar taxes, which are added where they apply. We may change our fees with 30 days’ notice; the change applies from your next billing month.

Availability

The banner script and consent records are hosted on Cloudflare’s network. We aim for the service to be available at all times but can’t guarantee it. If the script can’t load, your website keeps working, but the banner won’t show and trackers it would hold back may load without consent, so please tell us straight away if you notice it missing. We may make short planned changes to the service; they won’t affect your website’s visitors in any significant way.

Liability

Nothing in these terms limits liability that can’t be limited by law, such as for death or personal injury caused by negligence, or for fraud. Subject to that:

  • we aren’t liable for loss of profit, revenue, business, goodwill or data, or for any indirect or consequential loss;
  • we aren’t liable for losses that result from you not following these terms, from changes to your website we weren’t told about, or from the choices you approved;
  • our total liability to you under or in connection with the agreement in any 12-month period is limited to the fees you paid us in that period.

Ending the service

The service runs month to month. Either of us can end it for a website by giving 30 days’ notice by email. Either of us can end it straight away if the other seriously breaks these terms and doesn’t put it right within 14 days of being asked. When the service ends, the banner stops working on your website, so please remove our script and put another consent solution in place first. We’ll send you a copy of your consent records and sign-off history on request, and then delete them as described in the DPA.

General

We may update these terms by giving you 30 days’ notice by email; if you don’t agree, you may end the service before the change applies. Neither of us is responsible for delays caused by events outside our reasonable control. These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.