Cookie Policy

A cookie is a small text file that a website asks your browser to store, so the site can recognise the same browser the next time it is used. Related technologies — local storage, session storage, pixels and mobile SDKs — do the same job in a slightly different way. Wherever this policy says “cookies”, it means all of them.

A cookie can only be read by the site that set it. It cannot run programs, read other files on your device, or see anything you have not given to the site itself.

FlowSmartly uses cookies to keep you signed in, to keep your workspace secure, to remember how you like the product set up, to understand which parts of the platform are actually used, and to measure whether our own marketing reaches the right people.

We do not sell what cookies collect, we do not use them to build profiles of people outside our own service, and we do not place optional cookies before you have allowed them.

Every cookie we set belongs to exactly one of three categories, and two of them are yours to switch on or off:

The table above covers the FlowSmartly platform. This public website is smaller and simpler, so here is the complete, exact list of what it puts in your browser. It sets no cookies at all — it uses local storage, which is not sent with any network request. You can check every row of this in your browser's developer tools.

Until you make a choice, only the strictly necessary row exists. Anything measured before that point is held in memory and discarded if you decline — it is never written down and never sent. Withdrawing later removes the analytics row again, immediately.

Two things are deliberately absent from that list. The light, grey or dark appearance you pick on this site is not stored at all — it is held in memory for as long as the page is open and resets when you reload, so there is nothing on your device to clear. And fs.analytics.debug, which you may see if you have used our developer console, is only ever read by us and never written: it is a switch you set yourself to watch what would be sent.

Some cookies are set by companies that deliver part of the service for us — payment processing, error reporting, embedded video, live chat and advertising measurement. Each of them can only read the cookies it set itself, each is contractually bound to process the data on our documented instructions, and each is named in our subprocessor register with what it does and where it operates.

None of them run on this public website. These pages load no third-party script of any kind, so the list in section 4 really is everything — the third parties above appear once you are inside the platform.

If you switch off the Analytics or Marketing categories, the third-party cookies in those categories are not set at all — they are not merely ignored.

Session cookies are deleted the moment you close your browser. Persistent cookies stay until they expire or you delete them; we set each one to the shortest life that still does its job, and no optional category exceeds 24 months. The table in section 3 lists the maximum life of each category.

Local storage works differently and it is worth being exact about it: a local storage entry carries no expiry date, so the two entries in section 4 last until something removes them. The consent record carries its own date and we treat it as expired after 12 months. The attribution record is removed the instant you withdraw consent, and otherwise when you clear site data for this domain. The 24-month figure above is how long we keep analytics data in our own systems, which is a separate promise from what sits on your device.

Deleting cookies in your browser removes ours immediately. You will be signed out, and any preference you had recorded — including a decision to refuse optional cookies — is cleared, so we will ask again on your next visit.

Open cookie settings from the footer of any page to see every category we set and switch the optional ones on or off. The change takes effect straight away — nothing needs to be reloaded or re-saved. You can also do both from here:

Withdrawing is not harder than consenting: it clears the stored decision entirely, so the notice comes back and nothing optional is stored again until you say so.

Your choice is recorded per browser and per device, so a decision made on your laptop does not follow you to your phone. We ask again after 12 months, or sooner if we introduce a category that did not exist when you chose.

Every major browser can block cookies, delete them on exit, or clear them on demand — look for Privacy or Site settings in Chrome, Safari, Firefox or Edge. Private and incognito windows discard all cookies when the window closes.

There is still no agreed standard for how a website should answer a browser “Do Not Track” header, so we do not claim to honour it. We do honour the Global Privacy Control signal where the law requires it, by treating it as an opt-out of the Marketing category for that browser.

Independently of any signal, we do not follow individuals across other companies' websites.

We update this policy whenever the cookies we set change. Material changes are announced in the product and by email before they take effect, and the date at the top of this page always reflects the version you are reading.

For questions about this policy or about anything we store in your browser, reach out to us: