Cookie Policy

Last Updated: September 5, 2026

1. Our Commitment to Privacy

Swingfolio takes a privacy-first approach to how we build and operate our platform. We do not use advertising cookies, retargeting tools or third-party marketing pixels, and nothing measures what you do once you are signed in. On our public pages we use one first-party cookie to record which link brought you here, and Google Analytics to count page views, so we can tell which channels are worth the effort. Every cookie we set is listed below by name, along with the storage keys that hold your main preferences.

We believe your trading data and browsing habits are your business, not ours to monetise. This policy explains the minimal cookies and storage technologies we use to provide you with a functional, secure experience.

2. What Are Cookies?

Cookies are small text files that websites store on your device. They help websites remember information about your visit, such as your login status and preferences.

In addition to cookies, modern web applications also use localStorage and sessionStorage - browser features that allow websites to store data locally on your device. These work similarly to cookies but are typically used for different purposes.

3. Cookies and Storage We Use

Essential Cookies (Required)

These cookies are necessary for the platform to function securely. Without them, you would not be able to log in or use Swingfolio.

Name	Purpose	Duration	Type
sb-*-auth-token	Securely maintains your login session. This is set by Supabase (our authentication provider) and ensures you stay logged in as you navigate the platform.	Session	HTTP Cookie
sf_consent	Records that you accepted the Terms and Privacy Policy on the sign-up page, so the acceptance survives the redirect to a sign-in provider such as Google. Deleted once your account exists.	10 minutes	HTTP Cookie
sf_hp	Proof that a bot check passed, so you are not asked to repeat it on every request for the next few minutes. It holds no personal details and cannot be read by scripts.	30 minutes	HTTP Cookie
sf_ga	Stores your answer to the analytics question shown to visitors in the EU, EEA and UK. Until you answer it, no analytics runs. Closing the browser before you answer asks you again, and you can change your answer at any time with the buttons under this table.	Session until you answer, then 1 year	HTTP Cookie

Functional Storage (Your Preferences)

These store your preferences to improve your experience. They are not shared with anyone and remain on your device.

Name	Purpose	Duration	Type
swingfolio-last-page	Remembers the last page you visited in the dashboard so you can pick up where you left off.	Until cleared	localStorage
swingfolio-positions-table-preferences	Stores your positions table customisations (column visibility, ordering, sizing, and sorting).	Until cleared	localStorage
swingfolio-trade-ideas-table-preferences	Stores your trade ideas table customisations (column visibility, ordering, sizing, and sorting).	Until cleared	localStorage
theme	Remembers your light or dark mode preference.	Until cleared	localStorage
swingfolio_activity_tracked_v1	A one-time flag to record that you logged in during this browser session. Used only to update your last login timestamp.	Browser session	sessionStorage

Marketing Measurement

These record how you first reached us, so we can tell which channels bring people to Swingfolio. They are only set on our public pages and never while you are signed in.

Name	Purpose	Duration	Type
sf_attr	Records how you first reached a public Swingfolio page: the campaign labels on the link you clicked, the page you landed on, the domain of the site that referred you, and the hour you arrived. It holds no name, email address or account identifier. If you create an account, these values are copied to your account once and the cookie is deleted. It is never set while you are signed in, and it is never sent to a third party.	90 days	HTTP Cookie
_ga	Set by Google Analytics on our public marketing pages and blog. Used to distinguish one browser from another so repeat visits are not counted twice. Never set in the signed-in app.	2 years	HTTP Cookie
_ga_<container-id>	Set by Google Analytics on our public marketing pages and blog. Used to keep session state, so a series of page views is counted as one visit. The <container-id> part is the identifier of our measurement stream. Never set in the signed-in app.	2 years	HTTP Cookie

Browsers shorten these lifetimes on their own. Chrome caps a first-party cookie at 400 days without a return visit, and Safari at 7 days. Google's documentation states both limits.

You have not been asked, so analytics runs on our public pages.

4. What We Don't Use

We believe in respecting your privacy. Swingfolio does NOT use:

Advertising cookies - No Facebook Pixel, Google Ads, LinkedIn Insight Tag, X Pixel, or any retargeting tools
Cross-site tracking - We do not follow you onto other websites, and we do not buy or build profiles of you from other sources
Tracking inside the app - No measurement of any kind runs on the signed-in side of Swingfolio. Your trades, portfolios and notes are never part of any analytics
Third-party data sharing - We do not sell or share your browsing data with advertisers or data brokers

Why this matters: Many trading platforms and financial websites use extensive tracking to profile users and serve targeted advertising. We chose a different path. We measure our public pages so we know which ones are worth writing, and we stop at the sign-in boundary. Your trading activity stays private.

5. Third-Party Services

Swingfolio integrates with several third-party services to provide functionality. Apart from the ones noted below, these integrations run server-side only and set no cookies in your browser:

Supabase - Authentication and database services (sets essential auth cookie only)
Stripe - Payment processing (all communication is server-side)
EODHD - Market data and stock prices (server-side API calls only)
Google Generative AI - AI-powered insights (server-side API calls only)
Vercel - Website hosting and content delivery
Google Analytics - Measures use of our public marketing pages and blog. Sets the cookies listed above. Never loaded in the signed-in app

Apart from Supabase and Google Analytics, whose cookies are listed above, none of these services place cookies in your browser through Swingfolio.

6. Managing Your Preferences

You can manage cookies and local storage through your browser settings. Here are instructions for common browsers:

Google Chrome

Click the three dots menu → Settings
Navigate to Privacy and security → Cookies and other site data
Choose your preferred cookie settings

Mozilla Firefox

Click the menu button → Settings
Select Privacy & Security
Under Cookies and Site Data, manage your preferences

Safari

Go to Safari → Preferences (or Settings)
Click the Privacy tab
Manage cookie and website data settings

Microsoft Edge

Click the three dots menu → Settings
Select Cookies and site permissions
Manage your cookie preferences

Note: Disabling essential cookies will prevent you from logging into Swingfolio. Clearing localStorage will reset your table and theme preferences to defaults.

7. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology or legal requirements. When we make significant changes, we will:

Update the "Last Updated" date at the top of this page
For material changes, notify registered users via email or in-app notification

Your continued use of Swingfolio after changes become effective constitutes acceptance of the updated policy.

8. Contact Us

If you have questions about this Cookie Policy or how we handle your data, please contact us:

Email: [email protected]

For more detailed information about how we collect, use, and protect your personal information, please see our Privacy Policy.

Your Privacy Matters

Swingfolio is designed with privacy in mind. We collect only the minimum data necessary to provide our service, we don't track you across the web, and we never sell your information. Your trading data belongs to you.