Last updated 28 September 2026
Cookie policy
No tracking cookies, no advertising cookies, no consent banner. This page lists everything the site and the simulator store in your browser and why. It is written to comply with the Privacy and Electronic Communications Regulations 2003, which apply to any information stored on your device.
1. What the website stores
| Name | Set by | Purpose | Lasts | Type |
|---|---|---|---|---|
| dw_utm (session storage) | drawwarm.com | Remembers which link brought you here so that, if you send a form, we know which video or advert worked. Sent to us only when you submit a form. | Until you close the tab | Strictly necessary for the service you request (the form) |
| __cf_bm, cf_clearance | Cloudflare | Security: telling people from bots and blocking attacks. | Up to 30 minutes; up to a year for cf_clearance | Strictly necessary (security) |
| Turnstile | Cloudflare | The invisible bot check on forms and the free demo, where enabled. | Session | Strictly necessary (security) |
2. What an account adds
| Name | Set by | Purpose | Lasts | Type |
|---|---|---|---|---|
| sb-…-auth-token (local storage) | drawwarm.com (Supabase) | Keeps you signed in and refreshes your session. | Until you sign out, or 7 days without use | Strictly necessary (the service you asked for) |
| dw_device (local storage) | drawwarm.com | A random identifier for this browser, so the limit on different devices in a month can tell one device from another, and so Swapper’s free tier (one new swap a month) is counted for the device as well as for the account. It is not a fingerprint and is used for nothing else. | Until you clear site data | Strictly necessary (the device limit in the terms) |
| ds-accepted, df-accepted (session storage) | drawwarm.com | Remembers, in this tab, that you agreed to the Swapper or fault-trees terms when a tool is set to ask each session. The acceptance itself is recorded against your account on our servers, with its version and time. | Until you close the tab | Strictly necessary (the service you asked for) |
| Stripe cookies (on checkout.stripe.com and billing.stripe.com) | Stripe | Fraud prevention and running the checkout and billing pages, which are on Stripe’s domain. Stripe’s own cookie policy applies there. | Set by Stripe | Strictly necessary (payment) |
| Simulator session (on sim.drawwarm.com) | drawwarm.com | Connects your browser to your own simulator session and nobody else’s. | The session | Strictly necessary (the service you asked for) |
3. Analytics
We use Cloudflare Web Analytics, which counts page views without cookies, fingerprinting or any identifier that follows you between sites. That is why there is no cookie banner: everything stored is strictly necessary, which the law allows without consent, and there is nothing else to consent to. If we ever add a cookie that needs consent, we will ask first.
4. Controlling cookies
Your browser lets you block or delete cookies and site data. Blocking the Cloudflare security cookies may stop parts of the site working, and clearing site data signs you out. Details of what the data is used for are in the privacy notice.