Cookie Policy
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They help the site remember your actions and preferences (sign-in, language, font size, etc.) over time. We also use similar technologies such as local storage and session storage.
2. Categories we use
Strictly necessary (no consent required)
Needed for the Service to function — for example, to keep you signed in or to remember the items in a multi-step conversion. Without these, the Service cannot work.
Functional
Remember your preferences (theme, language) to give a smoother experience.
Analytics (consent required)
Aggregated, anonymous information about how visitors use the Service so we can improve it. Loaded only if you click "Accept" in the cookie banner.
Marketing (consent required)
We do not currently use marketing or advertising cookies. If we ever do, this page will be updated and your prior consent will be requested.
3. Cookie list
| Name | Provider | Purpose | Lifespan | Category |
|---|---|---|---|---|
connect.sid | DocFlow | Authenticates your session | 7 days | Strictly necessary |
docflow_cookie_consent | DocFlow | Stores your cookie banner choice | 1 year (localStorage) | Strictly necessary |
__cf_bm | Cloudflare | Bot management / performance | 30 minutes | Strictly necessary |
cf_clearance | Cloudflare | Security / DDoS protection | 30 days | Strictly necessary |
If we add analytics or marketing cookies in the future, they will be listed here and added only after you give consent in the banner.
4. Third-party cookies
If you sign in with Google, Google may set its own cookies under accounts.google.com. These are governed by Google's Cookie Policy. If you make a payment, Stripe may set cookies for fraud-prevention purposes — see Stripe's policy.
5. Managing your cookie preferences
- On DocFlow: click "Reject all" or "Accept all" in the cookie banner. To change your choice later, clear the
docflow_cookie_consententry from your browser's site data. - In your browser: all major browsers let you block or delete cookies. See aboutcookies.org.
6. Do Not Track
Because there is no industry consensus on how to interpret a "Do Not Track" signal, we do not currently respond to it. Use the cookie banner instead.
7. Changes to this Cookie Policy
We may update this policy as our use of cookies changes. The "Effective date" above will reflect the most recent version.