Cookie Policy
Last updated on 29 August 2026
About this policy
This policy explains the cookies and similar technologies we use on this website, what each one is for, and how you can control them. It sits alongside our Privacy Policy, which explains more broadly how we handle your personal data.
Swishes Limited is the operator of this website and is responsible for the cookies described here.
What cookies are
A cookie is a small text file that a website asks your browser to store. It lets the site recognise your device on your next page or your next visit — for example, to keep you signed in, or to remember a choice you have made.
Some of the technologies described here are not strictly cookies. Your browser also offers local storage, which works in a similar way but is not sent back to us with every request. Where we use it, we have said so.
Our approach
We only use the cookies needed to keep Swishes running unless you choose to allow optional cookies.
Analytics and marketing cookies are turned off by default. If you decide not to enable them, you can still browse, register, enter competitions, pay for entries, and manage your account and winnings as normal.
Your choices, and how to change them
The first time you visit, we ask which cookies you'd like to allow. You can accept everything, reject everything, or choose category by category. Rejecting is a single click, exactly like accepting.
You can change your mind whenever you like using the Cookie settings link at the bottom of any page. Your choice is remembered for six months, after which we will ask again.
You can also control cookies through your browser settings. Blocking all cookies, including essential ones, may affect how the website works.
Strictly necessary cookies
These are essential for the website to function. They cannot be switched off here, because without them we cannot sign you in or remember what you have chosen. We do not need your consent for these, and they are never used for advertising.
Name | Purpose | Expires |
|---|---|---|
better-auth.session_token | Keeps you signed in to your account. | When your session ends |
better-auth.dont_remember | Records that you asked not to stay signed in, so we end your session sooner. | When your session ends |
better-auth.state | Set only while you are signing in with Google, Facebook or Apple. It protects that sign-in against tampering and is discarded as soon as you return. | Minutes |
cookie_consent | Remembers the cookie choices you made here, so we do not ask again on every page. | 6 months |
Your basket is stored in your browser's local storage rather than in a cookie. Unlike cookies, this information stays on your device and isn't sent to us automatically. It is only shared with us when needed to provide the service you've requested, such as when you sign in or complete your order.
Analytics cookies
These are set only if you agree to them. They help us understand how the site is used so we can improve it. Wherever possible, we use aggregated information and do not use analytics cookies to identify you personally.
Name | Set by | Purpose | Expires |
|---|---|---|---|
_ga, _ga_<id> | Google Analytics | Distinguishes one visitor from another and measures how the site is used. | Up to 2 years |
_gid | Google Analytics | Distinguishes visitors over a short period. | 24 hours |
Marketing cookies
These are set only if you agree to them. They let us show you more relevant advertising and offers, measure whether our advertising works, and understand which campaign brought you to us.
Name | Set by | Purpose | Expires |
|---|---|---|---|
swish_attr | Swishes | Records which campaign or link brought you to the site, so a sign-up can be credited to it. | 90 days |
__kla_id | Klaviyo | Connects your activity on the site to your marketing profile, so our emails are relevant rather than generic. | Up to 2 years |
_fbp | Meta (Facebook) | Identifies your browser to Meta so we can measure and target our advertising. | Up to 3 months |
_fbc | Meta (Facebook) | Records that you arrived from a Meta advert, so that advert can be credited. | Up to 3 months |
fr | Meta (Facebook) | Used by Meta to deliver and measure advertising. | Up to 3 months |
_gcl_au | Records that you arrived from a Google advert, so that advert can be credited. | 90 days |
Tag management
We use Google Tag Manager to load the analytics and marketing tools listed above. Google Tag Manager does not set cookies itself or collect your personal data. It simply controls which tools are allowed to run based on the choices you make in your cookie settings.
We also use Google Consent Mode, which communicates your cookie preferences to Google's services. If you decline analytics or marketing cookies, Google Consent Mode ensures those services operate in a privacy-preserving way and do not store analytics or advertising cookies on your device.
Because the list of tools we use may change over time, the exact cookies within the analytics and marketing categories may vary. Your choices and the level of control you have over those categories will remain the same.
Third-party cookies
Where a cookie above is set by Google, Meta or Klaviyo, that provider can access the information stored in the cookie as well as us, and it sets the expiry — so the periods given are their current defaults rather than something we control. Those companies may combine what they learn here with data they hold from elsewhere. Their own policies explain what they do with it, and you can withdraw consent here at any time to stop it.
Our site is delivered through Cloudflare, which protects it from attack and speeds it up. Cloudflare may set a temporary security cookie where necessary to protect the website against malicious traffic if it needs to verify that a request is genuine.
If you decline
The core features of Swishes continue to work. You will still be able to browse, register, enter competitions, pay, and manage your account and your winnings. What changes is that we cannot see how the site is being used, and any advertising you see elsewhere will be less relevant. We will not ask you again for six months.
International transfers
Some of the providers listed above may process information outside the UK or European Economic Area. Where they do, they use appropriate safeguards in accordance with UK data protection law.
Changes to this policy
If we start using a new cookie, or use an existing one for a new purpose, we will update this policy. Where the change affects a category you have already agreed to, we will ask you again rather than assume your previous answer still applies.
Contact us
If you have a question about this policy or about how we use your data, contact us at [email protected] and we will answer. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.