Cookies Policy

This Cookies Policy explains how StoreWiz uses cookies and similar technologies when you visit our marketing website and use the StoreWiz platform. It supplements our Privacy Policy. Defined terms used here have the meaning given in the Privacy Policy.

In some jurisdictions (notably the EEA, the UK, Switzerland, Brazil, and parts of California) non-strictly-necessary cookies require your consent. We ask for consent via a banner the first time you visit; you can change your preferences at any time (see §7).

Section status (2026-05-28): The cookie banner is live today for visitors detected in the EEA, the UK, and Switzerland. Granular per-category controls ("Customize") and the persistent footer "Cookie preferences" widget is planned before general availability alongside the authenticated Admin Console; until then, the banner offers Accept all or Reject all only, and you can change your choice by clearing the sw-consent cookie in your browser.

---

1. What are cookies?

A cookie is a small text file placed on your device when you visit a website. Cookies are widely used to make websites work efficiently and to provide reporting information.

This policy also covers similar technologies: local storage, session storage, IndexedDB, web beacons, pixel tags, fingerprinting signals, and SDKs that perform analogous functions. When we say "cookies" in this policy, we mean cookies and these similar technologies. The one exception is our cookieless page-view counting (§3.3), which stores nothing on your device and is described there.

Cookies set by storewiz.ai or a StoreWiz-controlled domain are first-party cookies. Cookies set by other domains (including some sub-processors) are third-party cookies.

---

2. The four categories of cookies we use

We classify our cookies into four standard categories. Only Strictly Necessary cookies are set without your consent in jurisdictions that require consent for non-necessary cookies.

We do not use third-party retargeting or behavioral-advertising cookies on our own marketing site, and we do not sell or share Personal Data for cross-context behavioral advertising (see Privacy Policy §7.5).

---

3. The cookies we set (current list)

The lists below describe the cookies we set today. We update this list when cookies are added, changed, or removed.

3.1 Strictly Necessary

3.2 Preferences (not yet available)

3.3 Analytics (cookieless page-view counting is live; cookie-based analytics are not available and would be opt-in only)

We measure page views on our public pages with Vercel Web Analytics. It sets no cookies and stores nothing on your device, does not track you across sites, and does not keep your IP address. Because it uses no cookies, it runs for every visitor and is not part of the cookie choices in this policy. It records the page visited, the referring site, your country, browser, operating system and device type. We do not transmit analytics data to third parties for advertising purposes.

We set no cookie-based analytics today. If we ever add them, they will stay opt-in only in consent-required jurisdictions, this section will list them, and the policy will be updated first.

3.4 Marketing (marketing site only; opt-in only; a later release+)

We do not integrate Google Ads remarketing tags, Meta Pixels, TikTok Pixels, or similar cross-context behavioral-advertising trackers on our own marketing site at the time of this policy. If we add any in the future, this policy will be updated and consent re-prompted.

---

4. Cookies set by our sub-processors

A small number of our sub-processors set cookies in connection with the Services. These are governed by the relevant sub-processor's own cookie policy in addition to ours:

• Cloudflare (Turnstile). May set a short-lived challenge cookie on pages where the anti-bot widget runs. Cloudflare states Turnstile is not used for cross-site tracking or advertising. See https://www.cloudflare.com/privacypolicy/.
• Vercel. Sets edge-routing / load-balancing cookies. See https://vercel.com/legal/privacy-policy.
• Statuspage (on status.storewiz.ai). Sets functional cookies for the status page. See Atlassian's cookie policy.
• Clerk (not yet available, on authentication pages). Sets session/security cookies. See https://clerk.com/legal/privacy-policy.
• Lemon Squeezy (not yet available, on checkout pages). Sets payment/session cookies for the checkout flow. See https://www.lemonsqueezy.com/privacy.

We list these for transparency. None of these vendors place advertising cookies via the StoreWiz Services.

---

5. Legal basis

For Strictly Necessary cookies, our legal basis is our legitimate interest in providing a secure, functional service (GDPR Art. 6(1)(f)) and, where applicable, performance of contract (Art. 6(1)(b)). These cookies are essential and are set without your consent, but we provide notice.

For our cookieless page-view counting (Vercel Web Analytics, see §3.3), which sets no cookie and stores nothing on your device, our legal basis is our legitimate interest in understanding how our public pages are used (GDPR Art. 6(1)(f)). It runs for every visitor and is not part of the cookie choices below.

For Preferences, Analytics, and Marketing cookies, our legal basis is your consent (Art. 6(1)(a) and equivalent provisions in UK GDPR, Swiss FADP, Brazilian LGPD, Quebec Law 25). We obtain consent through the cookie banner before setting any non-strictly-necessary cookie in consent-required jurisdictions (see §6). Today we set only Strictly Necessary cookies on this marketing site; the banner stores your future preference for when Preferences, Analytics, and Marketing cookies begin shipping in later modules (see §3.2–§3.4).

In jurisdictions that do not require pre-consent for analytics (e.g., the United States generally), we still provide a clear opt-out mechanism (see §7).

---

6. Cookie banner behavior

The first time you visit our marketing site from a consent-required jurisdiction (EEA, UK, Switzerland), you see a cookie banner with the following options:

• Accept all. Consent to all categories.
• Reject all. Only Strictly Necessary cookies are set.
• Customize. Granular per-category consent. Planned before general availability. Until then, you can choose Accept all or Reject all; we will not set Preferences, Analytics, or Marketing cookies on the marketing site today regardless of your choice (see §3.2–§3.4). Our cookieless page-view counting (§3.3) sets no cookie, so it is not affected by your choice.

Inside the paid product, we will generally not present a marketing-cookie banner because we do not set marketing cookies there. We will present a notice for Preference/Analytics cookies in consent-required jurisdictions when those cookies begin shipping (not yet available).

We treat no choice as rejection of non-strictly-necessary cookies in consent-required jurisdictions (no implied consent).

The banner is intended to respect the Global Privacy Control (GPC) signal: if your browser sends a GPC signal, we will treat it as an opt-out request for cookie-based Analytics and Marketing cookies. Cookieless page-view counting (§3.3) sets no cookie and does not track you across sites, so it is not switched off by GPC. Programmatic GPC handling is planned before general availability; until Analytics and Marketing cookies actually begin shipping (not yet available), the practical effect is the same as having no Analytics/Marketing cookies to opt out of.

We do not use cookie walls (i.e., we will not require you to accept non-strictly-necessary cookies in order to access content).

---

7. Managing your preferences

You can manage your cookie preferences in several ways:

1. From the StoreWiz cookie preferences widget (is planned before general availability). A "Cookie preferences" link will be available in the footer of every page on storewiz.ai and inside the Admin Console. Until then, you can change your choice by clearing the sw-consent cookie in your browser (DevTools → Application → Cookies) to be re-prompted on your next visit from a consent-required jurisdiction.
2. From your browser. Most browsers let you block, delete, or be notified about cookies. The browser help docs explain how. Be aware that blocking Strictly Necessary cookies will break authentication and other essential functions.
3. From a Do Not Track / Global Privacy Control signal. Your browser may support a privacy signal. We are committed to honoring GPC and will respect it programmatically once Analytics and Marketing cookies begin shipping (not yet available). Today this site sets only Strictly Necessary cookies, so the practical effect is the same as a GPC opt-out for cookies (see §6). Cookieless page-view counting (§3.3) is not a cookie and is not switched off by GPC.
4. From your operating system / mobile device. Mobile devices have privacy controls for advertising IDs; we do not use mobile advertising IDs.

Withdrawing consent has no retroactive effect on processing that already occurred but stops further processing under that consent.

---

8. Tracking technologies we do not use

For clarity:

• We do not use third-party advertising cookies on our marketing site.
• We do not use cross-site tracking pixels for advertising (no Meta Pixel, no Google Ads remarketing tag, no TikTok Pixel) at the time of this policy.
• We do not use device fingerprinting for advertising. Cloudflare Turnstile collects minimal anti-bot signals on public forms. This is a security function, not an advertising function.
• We do not sell or share Personal Data collected through cookies for cross-context behavioral advertising (see Privacy Policy §7.5).

If we add any of the above in the future, this policy will be updated, consent re-prompted in consent-required jurisdictions, and we will publish a 30-day advance notice.

---

9. Children

Our marketing site and the paid product are not directed to children under 16 (or under 13 in the United States under COPPA). We do not knowingly set cookies on the devices of children outside legitimate B2B contexts.

---

10. International data transfers via cookies

Where cookies cause Personal Data to be transferred outside your country of residence (e.g., a US-based sub-processor reads a cookie set in the EEA), the transfer is covered by the mechanisms described in Privacy Policy §9 (SCCs, UK IDTA, FADP supplement, TIAs).

---

11. Changes to this Cookies Policy

We may update this Cookies Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. For material changes (e.g., adding a new tracking technology), we will:

• Re-prompt for consent in consent-required jurisdictions where consent is required for the new technology;
• Post a clear notice on our marketing site and in the Admin Console at least 30 days before the change takes effect.

Previous versions are archived at storewiz.ai/legal/archive.

---

12. Governing law

This Cookies Policy is governed by the laws of India. Disputes are finally resolved by arbitration under the Arbitration and Conciliation Act, 1996, seated in Mumbai, before a sole arbitrator, in English. The courts at Mumbai have exclusive jurisdiction for interim relief and enforcement. Mandatory consumer-protection and data-protection rights of your home country are preserved.

---

Contact. Privacy: privacy@storewiz.ai. DPO matters: dpo@storewiz.ai. Legal: legal@storewiz.ai.