Cookie Policy

This Policy Version 1.8, published October 28, 2026; the content amended in Version 1.8 takes effect on November 5, 2026; the content added in Version 1.7 still takes effect on November 4, 2026, and the effective dates of all other items and those set by earlier versions remain unchanged; the Google AdSense provisions (§2.3, §3.1 and §4.1) that Version 1.4 set to take effect on November 1, 2026, and the parts that Version 1.3 set to take effect on October 28, 2026, keep those effective dates.
Changes in Version 1.8: (1) in §2.1, the pages on which sway_dine is used now include the takeout / pickup ordering page; its purposes now include identifying the takeout / pickup orders sent by you, displaying your pickup number and limiting the number of orders not yet picked up from the same browser, and it is stated that takeout / pickup ordering requires this cookie; (2) in §2.2, the purposes of sway_dine_cart_ now include takeout / pickup ordering carts that have not yet been submitted, and "[table code]" in the key name is corrected to "[order code]"; the description of sway_dine_sound now includes takeout / pickup ordering; (3) in §3.1, the scope of Cloudflare Turnstile now includes the takeout / pickup ordering page. These amendments are a material change under §5.1; they are announced in the App 7 days before they take effect in accordance with §5.1, and they take effect on November 5, 2026.
Previous Version 1.7 was published on October 28, 2026; the content added in Version 1.7 takes effect on November 4, 2026.
Changes in Version 1.7: §2.1 adds sway_dine for table-side QR ordering (a random browser identifier that expires after 24 hours, of which the server keeps only a hash); §2.2 adds sway_dine_cart_[table code] (a cart that has not yet been submitted) and, in the merchant back-office on the official website, sway_dine_sound (on/off setting for the new-order alert sound). This item is a material change under §5.1; it is announced in the App 7 days before it takes effect in accordance with §5.1, and it takes effect on November 4, 2026.
Previous Version 1.6 was published and took effect on October 26, 2026.
Changes in Version 1.6: corrections and additions to match the items the Service actually uses: (1) §2.1 adds the iPhone App's merchant back-office login credential (sway_native_merchant_session), the push token (sway_native_push_token_v1), the temporary member QR codes (sway_member_codes_v1), the action pending after a QR scan (sway_pending_qr_link), the temporary points code (sway_pending_claim), the record for revoking Sign in with Apple authorization (sway_siwa_pending_at), the temporary storage of a changed login email in the merchant back-office on the official website (sway_login_email_hint), technical records (sway_api_batch_ok, sway_chunk_reload_at) and the visitor voting credential on the "Group pick" vote page (sway_vote_[vote code]); (2) §2.2 adds the random pick filters (sway_random_filters_v1) and, in the merchant back-office on the official website, the record of reservations kept despite a conflict (sway_resv_conflict_kept_v1) and the counter login record (snv_counter_landed); corrects the key name and description of the number of random picks used that day (the member number distinguishes different accounts on the same device) and the retention period of prompt records; removes the temporary restaurant photo cache, which the Service no longer uses, and notes that sway_fav_tags was left by older versions of the App and is no longer added; (3) §2.3 adds to the ad frequency records the daily display record of in-platform merchant full-screen launch ads (sway_splash_v1_shown_[date]); (4) §2.4 adds the share source record (sway_acq_src) and the usage session record for random pick performance statistics (sway_rec_session_active_at). This revision only corrects the descriptions to match the items the Service actually uses; it does not change how the Service actually processes data, and therefore takes effect on publication.
Previous Version 1.5 was published and took effect on October 25, 2026.
Changes in Version 1.5: §2.2 adds sway_pending_ref (when you arrive through a referral link that contains a referral code, your device temporarily stores that referral code, the time it was stored, its source and whether you have confirmed using it, so that the code can be applied after you sign up; it expires after 14 days and is deleted when you complete sign-up or clear the website/App data; on devices set to a European time zone it is stored in sessionStorage instead and cleared when you close the tab or the App). This item describes processing the Service already performs and adds no new category of data, so it takes effect on the date of publication.
Previous Version 1.4 was published and took effect on October 24, 2026, except that the provisions on Google AdSense (§2.3, §3.1 and §4.1; item (1) of the Version 1.4 changes below) take effect on November 1, 2026.
Changes in Version 1.4: (1) §2.3 adds (d): the advertising Cookies used by Google AdSense in the web version of the SWAY App, and the local storage that records the choice you make in the web version's ad options; §3.1 adds Google AdSense (including the statement that third party vendors, including Google, use cookies to serve ads, and a link to Google's explanation); §4.1 adds the ad options in the web version (before ads are first shown you are asked whether you accept personalized ads, and only non-personalized ads are shown until you choose) and provides that, in the European Economic Area, the United Kingdom and Switzerland, the choice is obtained through a Google-certified consent management platform; SWAY Plus members (including members who received Plus as a registration gift) are not shown Google AdSense ads. This item is a material change under §5.1; it is announced in the App 7 days before it takes effect in accordance with §5.1, and it takes effect on November 1, 2026; (2) §1.3 adds that the retention period of third-party Cookies follows each third party's settings; (3) §2.4 is renamed "Error Monitoring and Traffic Statistics" and adds Cloudflare Web Analytics, used on some pages of the official website (it sets no Cookies, stores no data on your device and produces only aggregated statistics). Items (2) and (3) describe existing processing and take effect on the publication date.
Previous Version 1.3, published and effective October 14, 2026, except that the provisions on the device identifier that stays the same after reinstallation and on the device codes sent when you scan a code in store or write a review (§1.2, §1.3 and §2.1), on Cloudflare Turnstile (§3.1) and on the display of advertising to Plus members (§2.3, §3.1 and §4.1) take effect October 28, 2026; the previous Version 1.2 was published and took effect on September 29, 2026; the previous Version 1.1 took effect on September 20, 2026; the previous Version 1.0 took effect on May 17, 2026.
Changes in Version 1.3: (1) the retention period of sway.sid in §2.1 now provides that "Keep me logged in on this phone for 30 days" may be ticked when logging in to the merchant back-office on the official website; if it is ticked, that login lasts 30 days from last use on that browser on that device; it remains 24 hours if it is not ticked; if the same browser is at the same time or later logged in to a SWAY member or administrator account, it becomes 24 hours from then on; and logging out of the SWAY member account in that browser also logs that browser out of the merchant back-office; it also states that, on logging out on that device, when the store owner uses "Sign out all devices" (except on the device used to do so), resets the password or completes a change of the login email, and when a staff account is deactivated or deleted or its password is changed (except, where staff members change their own password, on the device used to make the change), the logins concerned can no longer be used from the next time that device connects and this is confirmed by our system. This option applies only if the store owner or a staff member ticks it when logging in, and the retention period is unchanged for those who do not; this item therefore takes effect on publication; (2) §2.1 is corrected to match actual practice regarding sway_device_id: it is replaced when the App is deleted and reinstalled, it is sent when your account is synced as you sign in or open the App, and it is not sent by the web version; its purposes include determining whether the same person is obtaining a once-per-person benefit again. This item is consistent with the revision of the Privacy Policy made at the same time; it describes existing data within its original purposes and adds no new category of data collected; it therefore takes effect on publication; (3) §1.2, §1.3 and §2.1 add the device identifier that stays the same after reinstallation: the iOS App keeps in the device's Keychain a random code generated by the App itself that remains after the App is uninstalled, and the Android App uses the device identifier provided by the system (ANDROID_ID) and sends only the hash value after an irreversible hash on the device; that device identifier or device code is also sent when you scan a code in store or write a review, to confirm the authenticity of in-store scans and reviews; and §3.1 adds Cloudflare Turnstile bot verification. This item is a material change under §5.1; it is announced in-App at least 7 days before it takes effect, as required by §5.1, and takes effect October 28, 2026; (4) §2.3, §3.1 and §4.1: SWAY Plus members (including members who received Plus as a registration gift) are not shown Google AdMob or other third-party advertising; from October 28, 2026, ad placements purchased by merchants within the platform (full-screen launch ad, top banner, scrolling carousel, labeled "#Sponsored") are also shown to Plus members, and their impression and click records are handled under §2.3(a); before October 28, 2026, such ad placements are not shown to SWAY Plus paying members, and for Plus subscriptions paid before October 28, 2026 the same applies until the end of the paid period, after which §6.2 of the Refund and Cancellation Policy applies; this is consistent with the revision of the Privacy Policy made at the same time. This item is a material change under §5.1; it is announced in-App at least 7 days before it takes effect, as required by §5.1, and takes effect October 28, 2026.
Changes in Version 1.2: (1) §2.1 corrects the purpose of sway.sid, which is also used when members log in to the SWAY App (including the App's web version) or the Member Center on the official website, and corrects its retention period to 24 hours from last use; the description of member login credentials now includes the Member Center on the official website; the description of sway_device_id now states that it is sent to our servers when you log in and linked to your account; and sway_pref_at on the preferences page of the official website is added; (2) §2.2 adds functional storage items the Service actually uses (the number of random picks used that day, the restaurant photo cache, the share template cache, the Service Worker cache, the temporary in-store scan record, and the record of choosing "Not now" on the legal-update prompt), and clarifies the scope of prompt records; (3) §2.3 corrects what the ad frequency records actually store (the time the App was first opened, the number of times it has been opened, the time an ad was last shown and the number of ads shown that day) and adds the advertising test list cache (sway_ads_test_config). Version 1.2 only corrects the descriptions to match the cookies and local storage items the Service actually uses; it does not change how the Service actually processes data, and therefore takes effect on publication.
Correction within the same version on September 13, 2026: now that the App’s "Ad privacy options" entry point is live, the wording in §4.1 has been restored, covering the collection of consent from users in the European Economic Area (EEA) / United Kingdom / Switzerland through Google’s consent management tool (User Messaging Platform, UMP) and the ability to change that choice at any time in the App under "Settings → Privacy settings → Ad privacy options". The version number (1.1) and the effective date (September 20, 2026) remain unchanged.
Correction within the same version on September 16, 2026: the lists in §2 have been rewritten to match the technologies the Service actually uses: §2.1 now lists the login cookie and necessary local storage actually used, §2.2 lists functional local storage, the "ad Quality Score components" item, which the Service does not use, has been removed from §2.3, and §2.4 is now "Error Monitoring", explaining that Sentry keeps a sample of masked screen replays when an error occurs in the App; item names the Service does not use (including the recommendation result cache, map viewport, theme preference, sampled session replay and A/B testing group identifier) have been removed, and §1.3 now states the retention period of local storage. The version number (1.1) and the effective date (September 20, 2026) remain unchanged.
Operating Entity: SWAY CO., LTD. (registered in Taiwan as 隨食有限公司; brand name "Sui Shi SWAY")
Same-version correction on October 28, 2026: the description of Resend in §3.1 was corrected to state that it only sends notification emails, that emails contain no tracking pixel, and that the Company does not record opens or clicks (except delivery status), consistent with actual practice; this is a factual correction that reduces processing, and the version number and effective date remain unchanged.
This Policy is officially in Traditional Chinese; in case of discrepancy with any translated version, the Traditional Chinese version shall prevail.