Legal
Cookie statement
Version 2026-09-12.1. Every visitor is asked to choose under this version; when it changes, everyone is asked again.
1. What this covers
Cookies are small files a website stores in your browser; browser storage is the same idea without a file. This statement lists everything rewynder.com stores in your browser, why, for how long, and which of it you can refuse. It covers this website only — the ReWynder platform has its own notices, shown inside the platform.
2. The categories
- Necessary — always on
Remembering the cookie choices you make here, your language once you pick one from the globe menu, and how you reached this site — the parameters on the link you followed, the address of the site that linked here, and, when you arrive from an advertisement, the click reference the advertising network puts on its own link — so we can see which of our own pages and campaigns bring people here. This website has no login, no basket and no session. None of it carries your name, your address, your IP address, a fingerprint, or any identifier we make up to recognise you again; the advertising network’s click reference is the one identifier in there, kept as it came, so a click can be matched to the campaign that paid for it. None of it is shared with anyone else. One thing here IS set by another company, and only if you ask for it: press the button on one of the free website checks and Google reCAPTCHA runs to establish that there is a person on the page, storing identifiers of its own in Google’s storage. It runs on those three pages, after that press, and nowhere else on this site — and without it the check is not offered at all, which is why it cannot be switched off separately from the check itself. - Analytics — your choice
Google Analytics 4: which pages are visited, from which country and referrer, on what kind of device, for how long. We use it to see which parts of the site help visitors and which do not. Google truncates IP addresses; advertising features, remarketing and data sharing with other Google products are switched off. Google may process the data in the United States; reports are kept for 14 months and then deleted.
3. Everything we store
| Name | Type | Provider | Purpose | Duration | Category |
|---|---|---|---|---|---|
rw-consent | browser storage | rewynder.com | Your cookie choices and the version of this statement you accepted them under | 12 months, then we ask again | Necessary |
rw-lang | cookie | rewynder.com | The language you chose from the globe menu, so the site opens in it next time. Set only when you choose one; without it the site follows your browser’s language. | 12 months | Necessary |
rw-lang-hint | browser storage | rewynder.com | Remembers that you closed the bar offering this site in your browser’s language, so it is not shown again. Set only when you close it. | Until you clear your browser storage | Necessary |
rw-attr | browser storage | rewynder.com | How you reached this site: the parameters on the link you followed (the ones we put on our own campaign links, and the click reference an advertising network such as Google or Microsoft adds to its own), the address of the site that linked here, the page you arrived on and the language it was in. It is how we tell which of our own pages and campaigns work. It carries no name, no address, no IP address, no fingerprint and no identifier we make up to recognise you again — the advertising network’s click reference is the one identifier in there, a token that stands for a single click on a single advertisement, kept so the click can be matched to the campaign that paid for it. It is never shared with anyone. The campaign part of it — those link parameters and that click reference, and nothing about where you had been — travels with you when you press “ReWynd it” or join the waiting list, so a request you start can be traced back to what brought you; a waiting-list entry keeps it with the entry until the entry is deleted. | Until you clear your browser storage | Necessary |
_GRECAPTCHA and Google’s reCAPTCHA storage | cookie | Google reCAPTCHA | Set by Google when you press the button on one of the free website checks (/check, /accessibility, /built-with), so Google can tell a person from a script before we spend a page render on the request. It is stored by Google, on Google’s own domain, not by us; we see only the score it returns. It loads on that press and on no other page of this site, and nothing of it is loaded if you never press. | About 6 months, in Google’s storage | Necessary |
_ga | cookie | Google Analytics | Tells one visitor apart from another with a random identifier | 2 years | Analytics |
_ga_G5CRX6MFBP | cookie | Google Analytics | Keeps the state of your current visit (session) | 2 years | Analytics |
4. How your choice works
Nothing optional is loaded before you choose. Your choice is stored in your browser under rw-consent, together with the version of this statement, for 365 days. A new version of the statement, or a choice older than that, means we ask again. If you switch Analytics off later, the Google Analytics cookies are deleted and the page reloads without it.
Change your choices now: . The same button is in the footer of every page. You can also delete cookies in your browser at any time; the site keeps working without any of them.
If your browser sends a Global Privacy Control signal — a browser-level refusal that California, Colorado and Connecticut oblige sites to honour, and that several European regulators treat as a valid objection — we take it as a no to Analytics and do not ask you at all. Nothing optional loads. You can still switch Analytics on by hand with the button above if you want to.
5. Google Analytics, in detail
When Analytics is on, the page loads Google’s gtag.js and reports page views to Google Analytics 4. Consent Mode is used with advertising storage, ad user data and ad personalisation permanently denied; IP addresses are truncated; Google signals and data sharing with other Google products are off. We look at aggregated reports only. Google’s own processing is described in its privacy policy; Google Ireland Ltd. is the contracting party for European visitors.
Two things a visitor is entitled to know before saying yes. Where it goes: Google may process the data outside the European Economic Area, including in the United States, under the standard contractual clauses in Google’s data processing terms and Google LLC’s certification under the EU–US Data Privacy Framework. How long it is kept: the event and user data behind the reports is set to expire after 14 months, and the cookies themselves after the two years listed above — deleting them in your browser, or switching Analytics off here, ends it sooner.
6. reCAPTCHA, on the free checks
Three pages of this website — the website check, the accessibility check and what a site is built with — ask the ReWynder platform to open an address you give it. That costs us a real page load on real infrastructure, so the platform will not do it for a request it cannot tell apart from a script. When you press the button, Google reCAPTCHA v3 runs and returns a score; we send the score with the request and see nothing else. Google receives your IP address, your browser and how you interacted with the page, and stores identifiers of its own in your browser under its own domain rather than ours. There is no puzzle to solve.
Three limits on that, all of them checkable. It is loaded on the press, not on page load, so reading any of those pages and leaving means no contact with Google at all. It is loaded by the tool, so the other pages of this site never load it. And it is necessary in the strict sense: without it the check is not offered, which is why it is in the Necessary category rather than behind a switch — the switch is the button. Google’s badge is hidden and the attribution sentence is shown beside the button instead, which is what Google’s terms ask for.
The same check stands in front of the platform’s account-free flow, where you paste an address and see designs without signing up; it does not run once you are signed in. What Google receives, and why, is in section 3.1 of the privacy notice.
7. Versions
Each entry is dated. The version beside it is the consent version that was in force — a change that asks you nothing does not move it, and says so, so you are not asked to choose again over wording.
- 12 September 2026 — consent version 2026-09-12.1: This website has a third party on it for the first time in the Necessary category. The free website checks (/check, /accessibility, /built-with) ask the ReWynder platform to look at an address you give it, and the platform will not spend a page render on a request it cannot tell apart from a script — so pressing the button runs Google reCAPTCHA v3, which stores identifiers of its own in your browser under Google’s domain. It loads when you press, on those three pages only, and not at all if you never press one. Section 6 used to say reCAPTCHA does not run on this website; that is no longer true and the section now says what does. Your consent version moves, because a new third party is a change to what you are being asked — even one that only runs when you ask for it — so everyone is asked again.
- 11 September 2026 — consent version 2026-09-07.1, unchanged: Added rw-attr to section 3 (Necessary, browser storage): how you reached this site — the parameters on the link you followed, the click reference an advertising network puts on its own links, the site that linked here, the page you landed on — so we can tell which of our own pages and campaigns bring people here. It is ours alone and is shared with nobody. It carries no name, no address, no IP address and no fingerprint; the advertising network’s click reference is the one identifier in it, and section 3 now says so rather than claiming there is none. Joining the waiting list stores the campaign part of it with your entry. Section 2 was reworded to match; it used to claim this site stores nothing beyond your choices and your language, which is no longer true. Your consent version is deliberately unchanged: a first-party item in the Necessary category asks nothing of you, so nobody is asked to choose again.
- 7 September 2026 — consent version 2026-09-07.1: Google Analytics is switched on for the first time on this deployment. The session cookie is now named in full instead of as a placeholder, and section 5 says how long Google keeps the reports, that Google may process them in the United States and under which safeguard. A browser that sends a Global Privacy Control signal is treated as having refused analytics, so it is not asked.
- 5 September 2026 — consent version 2026-09-05.1: Added section 6: the ReWynder platform (not this website) uses Google reCAPTCHA on its account-free flow, which stores identifiers of its own in your browser there.
- 4 September 2026 — consent version 2026-09-04.1: The site no longer redirects on your browser language; it offers it in a bar instead. Added rw-lang-hint (Necessary, browser storage): remembers that you closed that bar.
- 3 September 2026 — consent version 2026-09-03.1: Added the rw-lang cookie (Necessary): remembers the language you choose from the globe menu.
- 26 August 2026 — consent version 2026-08-26.1: First version. Two categories: Necessary and Analytics (Google Analytics 4).
Questions: hello@rewynder.com. See also the privacy notice.