Legal
Cookies and your privacy choices
Last updated: July 19, 2026
The short version
Swoopd uses no advertising cookies and no cross-site tracking cookies. Nobody buys data from us, and no third party follows you from this site to another one.
What we do store falls into three groups: cookies that keep you signed in, settings you chose yourself (such as dark mode), and two cookies our payment processor sets on the payment form. Every one of them is listed further down, by name, with what it does and how long it lasts.
There is one thing you can switch off, and it is right below. There is no banner on this site because there is nothing to ask you about before a page loads.
Your choice
On by default. Turning it off stops usage and performance measurement in this browser. Everything else on the site keeps working exactly the same, and we do not ask again.
Analytics is on in this browser.
Changing the switch reloads this page, which is how the measurement scripts stop running straight away. The choice is saved in a cookie on this browser, so set it again on each browser or device you use. Clearing your cookies resets it to on.
How we measure usage
We use Vercel Web Analytics and Vercel Speed Insights to see which pages get used and how fast they load. Both are cookieless. They set no cookie, write nothing to your browser storage, and build no profile of you across sites or across visits. Vercel is already our hosting provider, listed in the Privacy Policy.
Because nothing is stored on your device and nothing identifies you, we do not have to ask permission before it runs. We give you the switch anyway. Turning it off stops the measurement scripts from loading at all on this browser, rather than loading them and asking them not to report.
The switch is saved in a cookie on the browser you set it in, so a second browser or a second device needs its own. That cookie holds the one setting and nothing else.
Everything we store on your device
The full list. It covers browser cookies, browser storage, and the keys the mobile app keeps on your phone. Some entries only apply if you use the feature that sets them (a passkey, checkout, the mobile app), and the “Where” line says which.
Necessary
Needed for sign-in, security, and remembering the choice you make on this page. Without these the site cannot keep you signed in.
better-auth.session_tokenCookieKeeps you signed in.
- Set by:
- Swoopd
- Lasts:
- 7 days
- Where:
- Set after you sign in
better-auth.session_dataCookieA short-lived cache of the sign-in check, so pages load without a database lookup every time.
- Set by:
- Swoopd
- Lasts:
- 5 minutes
- Where:
- Signed-in pages
better-auth.state / better-auth.oauth_stateCookieProtects the social sign-in handshake against request forgery. Which of the two is used depends on the sign-in method.
- Set by:
- Swoopd
- Lasts:
- 5 to 10 minutes
- Where:
- Social sign-in only
better-auth-passkeyCookieCarries the one-time challenge for a passkey sign-in or enrolment.
- Set by:
- Swoopd
- Lasts:
- Short-lived, cleared once the passkey step finishes
- Where:
- Passkey sign-in only
admin_sessionCookieTracks an administrator's own session while they are viewing an account for support, so they can return to it.
- Set by:
- Swoopd
- Lasts:
- Session
- Where:
- Administrators only
swoopd.privacyCookieRemembers your analytics choice from this page. It holds that one setting and nothing that identifies you.
- Set by:
- Swoopd
- Lasts:
- 1 year
- Where:
- Everywhere
swoopd.session.tokenMobile app storageKeeps you signed in to the mobile app.
- Set by:
- Swoopd
- Lasts:
- Until you sign out or remove the app
- Where:
- Mobile app
swoopd.push.tokenMobile app storageThe push token your device was issued, so we can send you the alerts you turned on.
- Set by:
- Swoopd
- Lasts:
- Until you sign out or remove the app
- Where:
- Mobile app, if you enable notifications
swoopd.push.deviceIdMobile app storageTells one of your devices apart from another, so turning notifications off on a phone does not turn them off on a tablet.
- Set by:
- Swoopd
- Lasts:
- Until you sign out or remove the app
- Where:
- Mobile app, if you enable notifications
Preferences
Settings you chose yourself. These live in your browser or your phone and are never sent to us.
themeBrowser storageRemembers whether you chose light mode, dark mode, or your system setting.
- Set by:
- Swoopd
- Lasts:
- Until you clear it
- Where:
- Everywhere
swoopd:whatsNewSeenBrowser storageRemembers which changelog entries you have read, so the What's New dot stays off once you have seen them.
- Set by:
- Swoopd
- Lasts:
- Until you clear it
- Where:
- The signed-in app
scout-setup-dismissedBrowser storageRemembers that you dismissed the Application Assistant setup prompt.
- Set by:
- Swoopd
- Lasts:
- Until you clear it
- Where:
- Application Assistant
swoopd.themeMobile app storageRemembers your light or dark mode choice in the mobile app.
- Set by:
- Swoopd
- Lasts:
- Until you remove the app
- Where:
- Mobile app
swoopd.auth.appleEnabledMobile app storageCaches whether Sign in with Apple is available, so the sign-in screen can draw before the check returns.
- Set by:
- Swoopd
- Lasts:
- Until you remove the app
- Where:
- Mobile app sign-in
Analytics
Nothing. Our usage measurement stores nothing on your device, so this category is empty.
Payment
Set by Stripe on the payment form for fraud checks. We never read them, and they are only set if you open checkout or billing.
__stripe_midCookieFraud checks on the payment form. Set and read by Stripe, not by us.
- Set by:
- Stripe
- Lasts:
- 1 year
- Where:
- Checkout and billing pages only
__stripe_sidCookieFraud checks on the payment form. Set and read by Stripe, not by us.
- Set by:
- Stripe
- Lasts:
- 30 minutes
- Where:
- Checkout and billing pages only
Managing storage yourself
Your browser can block or clear all of this without asking us. Doing so signs you out and resets your saved settings, including the analytics choice above, which returns to on. Browser settings and private windows both work; nothing here is designed to survive them.
On the mobile app, signing out clears the sign-in and push keys, and removing the app clears the rest.
Changes to this notice
If we add anything that stores data on your device, it gets added to the list above in the same change that ships it, and the date at the top moves. For anything that would need your permission, we would ask you first.
Questions go to hello@swoopd.ai. The full Privacy Policy covers what we collect on the server, who processes it, and your rights over it.

