Swiftly WorkspaceCookie Policy
1. What Cookies Are
Cookies are small text files a website places on your device so it can recognise your browser on a later request. Similar technologies — localStorage and sessionStorage among them — store data in your browser without sending it back automatically. This policy covers both: what matters is that something is kept on your device, not the mechanism used.
2. What This Site Actually Uses
Very little, and deliberately so. Exactly one piece of third-party code can run on this website: Google Analytics 4, which measures which pages are read and for how long. It loads only on our public marketing, legal and partner pages, and only after you switch analytics on in the preferences panel below. Until then its tag sits on the page inert — the address is written down, and your browser never contacts it.
Beyond that we load no tag manager, no advertising pixel, no embedded video or form from another company, and no fonts from an outside server. Every other script, stylesheet, image and font we serve comes from this domain. That is not a promise we make in prose only — it is enforced by an automated test that fails our build if any page starts referencing an outside address we have not listed and reviewed.
Analytics never runs inside your workspace. The sign-in page, the account-setup pages, the billing return pages and every signed-in page are excluded from it, and their security settings do not permit it to load at all.
3. The Storage We Do Use
Strictly necessary — always active
- Session cookie (name: swiftly_web_session). Set only when you sign in to an account area, submit a partner application, or open a partner contact form. It holds a random identifier that lets us keep you signed in and protects the form against cross-site request forgery. It carries the HttpOnly, Secure and SameSite flags, contains nothing about you, and is not used for analytics or advertising. Simply reading pages on this site does not set it.
- Your cookie choices (localStorage key: swiftly_web_consent). Written only if you use the preferences panel on this page. It records which categories you allowed and when, so we do not have to ask again. It never leaves your browser — there is no request that sends it to us.
- Statistics dashboard session cookie (name: swiftly_bot_dashboard). Set only when a member of our team signs in to our internal website statistics dashboard, and scoped to that dashboard's own address, so reading this site never sets it. It carries the HttpOnly and SameSite flags and expires when the team member signs out, or after 12 hours.
Our anonymous visit statistics, described in section 2.1 of our Privacy Policy, are counted on our server when a page is served. They place nothing on your device, so they appear in no category here and run the same whatever you choose below.
Analytics — off until you switch it on
- Google Analytics 4 (cookies: _ga and _ga_ followed by an identifier). Set only if you allow the analytics category. They hold a randomly generated identifier used to count visits and recognise a returning browser, so we can see which pages are read and which are not. They are set by Google LLC acting as our processor. Switching analytics off in the panel below deletes them and stops the measurement immediately.
Functional and marketing — none in use
These two categories appear in the preferences panel below and are switched off. We list them rather than hide them for two reasons: so you can see there is nothing running under them, and so that if we ever do add something — an embedded demo video, say — it arrives switched off and asks you first, instead of arriving silently under a category that was never disclosed.
4. Consent and the Legal Basis
Under the ePrivacy Directive as transposed into Belgian law, storage that is strictly necessary to deliver a service you asked for does not require consent. The three strictly necessary items in section 3 are of that kind: the session cookies exist only because someone signed in or opened a form, and the record of your cookie choices exists only because you made one.
Analytics sits outside that boundary, so it requires your prior consent — freely given, and as easy to withdraw as to give. That is why a consent request appears on your first visit, before anything analytics-related is loaded or set, and why declining is a single click that costs you nothing: every page works identically either way.
Withdrawal is real, not just recorded. Turning analytics off deletes the cookies it set and stops it in the same action, rather than leaving what is already running in place until it expires.
5. Managing Your Preferences
Use the preferences panel on this page to review or change your choices at any time, including withdrawing a permission you previously gave. Withdrawing is exactly as easy as granting, and takes effect immediately.
Your browser also gives you control: every major browser can block or delete cookies and site data, either for all sites or for this one. Clearing site data for this domain removes every item in section 3, which means you will be signed out and your cookie choices will be forgotten.
Blocking the strictly necessary session cookie will stop you from signing in or submitting a form. It will not affect reading any public page.
6. Third Parties
One. Google LLC provides Google Analytics 4, which we use to measure how our public pages are read. It acts as our processor, it sets and reads the cookies listed in section 3, and it does so only for visitors who have switched analytics on. Google publishes its own privacy policy and its own description of how Analytics data is used; you can reach both from its website. If you would rather not be measured, the preferences panel below is the shortest route, and Google also publishes a browser add-on that opts you out of Analytics on every site.
No other third party sets or reads storage on this website. If that changes, this section will name each new party, what it does and where to find its own privacy policy, and the change will be accompanied by a consent request.
Our infrastructure provider hosts this site and necessarily processes the network requests that reach it — that is hosting, not tracking, and it is covered in our Privacy Policy rather than here.
7. How Long Things Are Kept
- Session cookie: deleted when the session ends or expires; it is not a persistent cookie.
- Statistics dashboard session cookie: expires 12 hours after a team member signs in, or earlier when they sign out.
- Cookie choices: kept in your browser until you clear site data or change them. We also version the record, so a material change to the categories asks you again rather than assuming an old answer still applies.
- Analytics cookies: set for up to two years by Google, and deleted immediately if you switch analytics off here. Clearing site data for this domain removes them too.
8. Changes and Contact
We will update this policy when our practices or the law change, and the “Last updated” date above will move with it. A change that introduces new storage will be accompanied by a consent request, not by a quiet edit to this page.
Questions about this policy, or about cookies generally, go to info@swiftly-workspace.com. How we handle personal data more broadly is described in our Privacy Policy, linked in the footer of every page.