Cookie and Browser Storage Policy
Last updated: 2026-10-03 Version: 2.1 Status: Publication notice Effective: On publication of this edition
This notice explains the processing and choices applicable to the features you use. It applies when this edition is published. Descriptions of upcoming features do not mean they are already enabled. Contract changes have their own notice and application dates; this notice is not a request for contractual acceptance or optional cookie consent.
Supa Labs OÜ, registry code 17399414, operates Swaps. This policy describes cookies, local storage and similar access to information on your device. Contact: legal@swaps.app. See also the Privacy Policy.
1. Technologies and purposes
Cookies are small browser records; local storage retains information for an origin until removed. Similar technologies can store preferences, identify a session, measure use or deliver marketing.
| Category | Purpose | Choice |
|---|---|---|
| Necessary | Authentication, security, maintaining a requested session, and recording your privacy choices | Used where necessary for the requested service; not an optional marketing permission |
| Functional | Optional convenience and personalisation beyond what is necessary for a feature you request | Off until enabled |
| Analytics | Optional measurement of pages, interactions and feature usage, including enabled Google Analytics or tag integrations | Off until enabled |
| Marketing | Optional campaign measurement or advertising-related identifiers and tags | Off until enabled; disabled when Global Privacy Control is recognised |
A preference directly needed for a feature you deliberately request may be necessary for that feature. We do not classify all measurement or convenience storage as necessary.
2. Choices and consent record
You can accept optional categories, reject them, or select categories individually. Rejecting optional categories does not prevent essential access. You can reopen and change choices at Cookie preferences.
The browser stores the current choice in local storage under swaps_cookie_consent_v3, with a policy version, saving timestamp and selected categories. The choice expires after 365 days and must then be renewed. Older unversioned choices are not treated as current consent. Clearing storage or using another browser or device can also cause preferences to appear again.
If storage is unavailable, a warning explains that the choice applies only to the current session. Optional categories still start disabled. A recognised Global Privacy Control (GPC) signal turns off marketing even if a stored choice enabled it; it does not subscribe you to analytics or override a rejection.
A referral code you choose for a requested benefit can be retained separately for the current tab session in swaps_referral_choice, with the code and relevant timestamps. This minimal record does not include UTM parameters, referrer information or marketing history, and is used to deliver the requested benefit. It is separate from optional campaign attribution.
3. When optional tools run
Optional external analytics or marketing tags are enabled only after the relevant choice. Events collected before analytics consent are not replayed to external analytics merely because consent is later granted. Withdrawal stops future optional use governed by that choice; it does not make prior lawful processing unlawful.
Changing preferences cannot always remove cookies or records already held by a third party. You can also use browser controls to delete existing cookies and storage, and exercise data rights described in the Privacy Policy.
4. Necessary operations and telemetry
The site must send requests to load content, authenticate, deliver a requested transaction and protect against abuse. Server-side financial, security and diagnostic records can still support a requested transaction, investigation and reliable operation. Client analytics and funnel-event tracking require analytics opt-in; their session and queue records are stored only after that choice, and rejection clears them. Campaign UTM and attribution-history storage require marketing opt-in. Necessary server-side financial, security and diagnostic operations may continue when optional analytics is rejected; they remain subject to applicable necessity, privacy and storage-access requirements.
This policy does not promise that rejecting optional cookies stops every network request or every operational record.
5. Providers and storage duration
Authentication, hosting and security services may use their own necessary session or security records when the relevant feature is used. Enabled optional integrations may set additional identifiers. Their names and lifetimes can depend on the deployment, browser and provider configuration; the 365-day period above concerns our preference record, not every provider cookie.
Relevant service categories include Supabase authentication, hosting and network security, and optional Google measurement/tag tools and Vercel Analytics/Speed Insights. A provider checkout you choose, an embedded third-party service or an AI host may have separate storage and consent controls. Our choice does not replace that provider's notice or control its separate site.
6. Browser and app controls
Browser settings can reject or delete storage, but blocking necessary storage may prevent sign-in or requested features. App and operating-system permissions are separate from these website preferences. Changing one browser does not change all devices, email subscriptions or third-party platform settings.
7. Changes and contact
We will update this policy and seek a new choice when required for a material change to optional purposes or technologies. For questions or privacy rights, contact legal@swaps.app.