Cookie Policy
Last updated: 2026-05-24 Effective: 2026-05-01
This Cookie Policy explains what cookies FlowLibs uses, why we use them, and your choices. It supplements our Privacy Policy.
What are cookies?
Cookies are small text files that a site stores in your browser. They let a site remember you between page loads, keep you signed in, and understand — in aggregate — how the site is used. "Cookies" in this document also covers similar technologies like localStorage and sessionStorage.
What we use cookies for
FlowLibs uses a small set of cookies. We do not use advertising cookies, and we do not allow third parties to track you across other websites from FlowLibs.
Strictly necessary
| Cookie / item | Set by | Purpose | Typical lifetime |
|---|---|---|---|
sb-<project>-auth-token | Supabase (via @supabase/ssr) | Keeps you signed in and authenticates requests on your behalf | Session / up to 1 year |
sb-<project>-auth-token-code-verifier | Supabase | PKCE code-verifier used during the OAuth sign-in flow | A few minutes |
| Google OAuth state cookies | Google (during sign-in redirect) | CSRF protection during the OAuth handshake with Google | Short-lived |
| CSRF / session cookies | FlowLibs | Protect form submissions and authenticated actions from cross-site attacks | Session |
flowlibs:cookie_consent | FlowLibs (localStorage) | Remembers your cookie choices so we don't ask on every visit | Until cleared |
Without these cookies, the Service cannot function — you wouldn't be able to sign in or stay signed in. They are set on the basis of our legitimate interest in delivering the Service you requested. (The flowlibs:cookie_consent item only records your own consent choices, so it is exempt from consent itself.)
Analytics (consent required)
We load analytics only after you opt in through the cookie banner shown on your first visit. If you decline, or until you choose, these are not loaded at all.
| Cookie / item | Set by | Purpose | Typical lifetime |
|---|---|---|---|
ph_* (e.g. ph_<project>_posthog) | PostHog | Product analytics — understanding which flows and pages are used, and measuring the signup/checkout funnel in aggregate | Up to 1 year |
_vercel_jwt, __vercel_toolbar, etc. (as applicable) | Vercel | Privacy-friendly, aggregate site analytics via Vercel Analytics. We do not see IP addresses, and Vercel Analytics does not track you across other sites | Up to 1 year |
PostHog is configured for product analytics only — identified_only person profiles, no advertising integrations, and no cross-site tracking. Vercel Analytics is designed to operate without personal identifiers. If you'd prefer not to be measured, simply decline analytics in the banner, or change your choice later (see "Your choices" below).
Payment (Pro and Team subscribers only)
When you start a checkout, you are handed off to Stripe. Stripe sets its own cookies on its checkout domain for fraud prevention and session integrity. FlowLibs does not read those cookies. See Stripe's own cookie and privacy notices.
What we do not use
- No advertising cookies.
- No cross-site tracking pixels.
- No social-media "like" or "share" trackers that phone home.
Your choices
- Cookie banner. On your first visit we ask whether to enable analytics. Nothing beyond strictly necessary cookies loads until you accept.
- Change your mind any time. Use the Cookie settings link in the site footer to re-open the banner and switch analytics on or off. Turning analytics off stops further collection and clears the analytics identifier from your browser.
- Browser controls. All major browsers let you block or delete cookies. Blocking strictly necessary cookies will break sign-in.
- Global Privacy Control / Do Not Track. If your browser sends the GPC or Do Not Track signal, we honor it by disabling analytics for your session even if you have accepted.
- Delete your account. Deleting your account also invalidates the auth cookies tied to that account.
Changes to this Policy
We may update this Cookie Policy as the Service evolves. Material changes will be reflected in the "Last updated" date above, and significant changes will be announced in-app or by email.
Contact
Questions? Email hello@flowlibs.com.