Cookie Policy

Zero cookies and zero client-side storage

We verify our storage behavior empirically rather than by assumption. On 6 August 2026 we audited the home page, the contact page, and our system detail pages in a clean browser profile: zero HTTP cookies, zero localStorage entries, and zero sessionStorage entries were written across any page — including the contact page with the anti-abuse verification widget active.

Because privacy regulations require consent banners only when a website stores or accesses non-essential information on a visitor's device, and because this website stores nothing on your device, we do not display an unnecessary cookie banner.

First-party edge scripts in operation

Cloudflare Web Analytics. Pages load a lightweight measurement script from static.cloudflareinsights.com to record aggregate page views, HTTP referrers, and core web performance metrics. This service is strictly cookieless: it stores no client-side identifiers and performs no browser fingerprinting, meaning it cannot track visitors across websites or recognize returning individuals. We review aggregate traffic statistics only.

For technical transparency, this analytics script is injected at the network edge by our Cloudflare hosting platform rather than committed directly inside the website's static source repository.

Cloudflare Turnstile — contact page only. Our contact form on /contact/ is protected by Cloudflare Turnstile (loaded from challenges.cloudflare.com) to verify that submissions originate from human visitors rather than automated scripts. Turnstile is a privacy-preserving alternative to legacy CAPTCHAs and sets no tracking cookies on this site. It is loaded exclusively on the contact page where it is strictly necessary to prevent automated abuse.

Technologies we do not use

• No advertising, behavioral tracking, or retargeting pixels.
• No Google Analytics, Meta Pixel, LinkedIn Insight Tag, or third-party marketing trackers.
• No embedded social-media widgets or third-party sharing scripts.
• No third-party font CDNs — all web fonts are self-hosted directly from our domain so external font providers never receive visitor IP addresses.
• No session-replay recording, heatmap scripts, or client-side A/B testing trackers.

Authenticated SuiteWright product workspaces

This zero-cookie policy applies to our public marketing website (suitewright.com). When you sign in to an authenticated SuiteWright cloud SaaS workspace or isolated single-tenant system, the application uses strictly necessary authentication and security storage (such as encrypted session cookies, CSRF tokens, and workspace language or UI preferences) solely to authenticate your account and maintain session security. Because these are strictly necessary to deliver the service you requested, they are never used for advertising or cross-site tracking.

Visitor controls

Because no cookies or local storage items are written to your device, there is no stored state to clear. If you prefer to block the edge analytics script entirely, any standard content blocker or browser tracking-protection setting will prevent static.cloudflareinsights.com from loading without affecting site functionality.

Future updates

Should we ever introduce a feature that stores non-essential data on a visitor's device, we will implement an explicit opt-in consent mechanism prior to deployment and update this policy and its effective date accordingly. Inquiries: hello@suitewright.com. See also our Privacy Policy.