This policy explains which cookies we use on the Sizewright website and platform, and why. It applies from October 15, 2026. In short: we use only cookies that are strictly necessary to provide what you ask for, our website statistics work without cookies, and that is why we do not show a cookie banner.
What cookies are
Cookies are small text files that a website stores in your browser. They let the website remember something between one page and the next, such as the fact that you are signed in. Some cookies are set by the website you visit (first-party cookies); others are set by a service that website uses (third-party cookies).
The cookies we use
All cookies below are strictly necessary: without them, signing in, security checks, language choices, approval links or payment would not work. The law allows such cookies without consent. We do not use cookies for advertising, for tracking you across websites, or for building a profile of you.
On secure connections, the names of the sign-in cookies start with __Secure-, for example
__Secure-sw.session_token.
Signing in and staying signed in
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
sw.session_token | Sizewright | Keeps you signed in. It holds a random session identifier, not your password. | 30 days, renewed while you use Sizewright |
sw.session_data | Sizewright | A short-lived copy of your session, so pages load without asking the database each time. | 5 minutes |
sw.two_factor | Sizewright | Remembers, during sign-in, that you still have to enter your authentication code. | 10 minutes |
sw.trust_device | Sizewright | Set only if you check “Trust this browser for 30 days”, so this browser can skip the authentication code. | 30 days |
sw.state | Sizewright | Protects a sign-in with Google against forged requests. | 5 minutes |
sw-locale | Sizewright | Set when you continue with Google: carries the language of the sign-in or sign-up page through the Google sign-in, so the platform, and a new account, use that language. | 15 minutes |
Website and language
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
sw_site | Sizewright | Keeps the website address you typed on the home page, so the brand import after sign-up starts filled in. | 1 day |
sw_lang | Sizewright | Remembers your answer to the bar that suggests a page in your language, so it does not ask again. | 1 year |
Approval links
These cookies are only set on the pages of an approval link, and only for reviewers.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
sw_reviewer | Sizewright | Remembers the name and email address you entered as a reviewer, so you do not have to type them again. | 180 days |
Name starts with sw_ and ends with the link’s id | Sizewright | Remembers that you entered the password of a password-protected approval link. It stops working when the password changes or the link is revoked. | 12 hours |
Notices in the platform
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
sw-announcement-dismissed | Sizewright | Remembers which announcement you closed, so it does not come back. | 90 days |
sw-maintenance-refused | Sizewright | During maintenance, tells the page you return to that your last change could not be saved. | 1 minute |
Security and payment
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
__cf_bm and other Cloudflare security cookies | Cloudflare | Tell people apart from automated traffic and protect the website against attacks. | 30 minutes for __cf_bm, as set by Cloudflare |
| Turnstile | Cloudflare | Checks that a person, not a bot, submits the sign-up, sign-in, password reset and email change forms. Turnstile can store data in your browser for this check. | Short-lived, as set by Cloudflare |
__stripe_mid, __stripe_sid | Stripe | Fraud prevention, on the checkout page only. | 1 year and 30 minutes, as set by Stripe |
Cloudflare and Stripe set these cookies as our service providers and for their own security and fraud prevention. Their privacy policies explain what they do with the data. When you sign in with Google, you go to Google’s own pages, where Google’s cookie policy applies.
Website statistics without cookies
We count visits to our website with Cloudflare Web Analytics. It does not use cookies or other storage in your browser, and it does not recognize you on a later visit. It tells us, for example, how many people looked at a page and which pages they came from.
Other storage in your browser
During sign-up, the page that asks you to confirm your email address keeps the address you entered and the time we sent
the link in your browser’s session storage (sw.pending-email and sw.pending-email-sent-at). That way it can show
where the link went and space out requests for a new one. Session storage is cleared when you close the tab.
Why there is no cookie banner
The law requires consent for cookies, unless a cookie is strictly necessary to provide a service you ask for. All cookies on Sizewright fall under that exception. Asking for consent would therefore not give you a real choice, so we do not show a banner.
Our commitment
If we ever want to use a cookie or similar technology that is not strictly necessary, for example for advertising or for analytics that recognize you, we will ask for your consent first, before anything is set, and give you a way to change your choice at any time. We will also update this policy.
Managing cookies in your browser
You can see and delete cookies in your browser’s settings, and block them altogether. If you block or delete the cookies on this page, you will be signed out, and signing in, approval links or checkout may stop working until you allow them again.
Changes to this policy
We update this policy when we add, change or remove a cookie. The version and date at the top show when it last changed.
Contact
Questions about cookies or your personal data go to support@sizewright.com. More about how we handle personal data is in our privacy policy.