Last updated: July 2026
This Cookie Policy describes how Llow Group Limited, trading as Swallow (“Swallow”, “we”, “us” or “our”), uses cookies and similar technologies when you use our Sites — www.swallow.app (the marketing site) and our web application at app.swallow.app.
This Cookie Policy forms part of our Privacy Policy. Capitalised terms not defined here have the meaning given in the Privacy Policy.
1. What are cookies?
Cookies are small text files that a website places on your device (computer, phone or tablet) when you visit it. Similar technologies include local storage, session storage, pixel tags and container tags. In this Policy we use “cookie” to cover all of them unless we specifically distinguish.
2. Do I have to accept cookies?
No. Some cookies are strictly necessary for the Sites to work as intended (for example to keep you logged in or to prevent request forgery). These will always be set. Everything else — analytics, marketing, personalisation — is only set with your consent, which you give (or refuse) via the cookie banner the first time you visit and can change at any time.
You can also block or delete cookies via your browser settings, but doing so may stop parts of the Sites from working correctly.
3. Cookies we set
3.1 Strictly necessary — always on
These cookies are required to run the Sites and cannot be disabled through the consent banner.
| Cookie name | Provider | Purpose | Expiry |
|---|---|---|---|
| swallow.session | Swallow (app.swallow.app) | Keeps you logged in to the web application | Session |
| swallow.csrf | Swallow (app.swallow.app) | CSRF protection on form submissions | Session |
| Cognito ID / access / refresh tokens | AWS Cognito (app.swallow.app) | Authentication tokens issued after login | Up to 30 days |
| cf_bm, __cf_bm | Cloudflare / Webflow (www.swallow.app) | Bot-management for the marketing site | 30 minutes |
| swallow.consent | Swallow (www.swallow.app) | Records your cookie-banner choices | 12 months |
Cookies we use to improve services we offer.
There are cookies we use that aren’t essential to make the services we offer function, but these cookies give us additional information that we can use to help us improve those services. These cookies have been categorised into partners in the table below.
If you don’t want these cookies to be installed on your device, you can change the settings on your browser or device to reject cookies. For more information about how to manage cookies using your Internet browser settings, you can check out the ’Help’ section of your internet browser (or alternatively visit http://www.aboutcookies.org).
It’s worth noting that if you do set your Internet browser to reject cookies or otherwise withdraw your consent in relation to cookies, there’s a chance you may not be able to access all of the functions of our website and services.
Amazon Web Services
We use Amazon’s hosting services so we don’t have to maintain our own servers.
| Cookie name | Purpose | Expiry |
|---|---|---|
| AWSALBCORS | Load balancing | 7 days |
3.2 Analytics — set only with consent
We use privacy-friendly analytics to understand how visitors use the marketing site and application so we can improve them. These cookies do not identify you personally.
| Cookie name | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga, _ga_*, _gid | Google Analytics 4 | Aggregated site-usage analytics | Up to 24 months |
| _gcl_au | Google Ads / Adsense | Measures marketing campaign effectiveness | Up to 90 days |
If Google Analytics is disabled or you decline analytics cookies in the banner, none of these are set.
3.3 Marketing — set only with consent
We do not currently set marketing or advertising cookies beyond the campaign-measurement cookie listed above. If we introduce any in future we will list them here and only set them with your consent.
3.4 API and MCP endpoints
Our REST API and Model Context Protocol server do not use cookies. They authenticate every request via API keys or OAuth bearer tokens issued through your account, and store no client-side state on your device.
4. Managing your choices
Cookie banner — click the “Cookie preferences” link in the footer of www.swallow.app at any time to change your choices.
Browser settings — most browsers let you view, block or delete cookies. See aboutcookies.org for step-by-step instructions.
Google Analytics opt-out — you can install Google’s browser opt-out add-on to prevent Google Analytics from collecting your data across any site.
5. Pixel tags and similar technologies
We may use pixel tags (also known as web beacons or clear GIFs) on the marketing site and in email newsletters to measure the effectiveness of our marketing campaigns and understand how content is used. Pixel tags do not read data from your device and can be blocked by disabling remote images in your email client.
6. Changes to this Policy
We may update this Cookie Policy from time to time — for example if we add new analytics tools or change our banner provider. When we make material changes we will re-prompt for consent where required.
7. Contact
Questions about this Cookie Policy?
Llow Group Limited (trading as Swallow)
3rd floor, 86–90 Paul Street
London EC2A 4NE
United Kingdom
Email: contact@llow.io