DRAFT v1.0 — pending legal review. The English version is the binding one; translations will follow once the text is final.
LoyaFlow Cookie Notice
Short version: we only use cookies that are strictly necessary to make the platform work. We use no advertising cookies and no third-party analytics cookies — that is why you don't see a cookie banner.
1. What we use
| Cookie / storage | Purpose | Type | Duration |
|---|---|---|---|
| Authentication session (Supabase) | Keeps you signed in to the dashboard | Essential | Session / refresh window |
| Security tokens (CSRF/state) | Protects forms and login flows | Essential | Session |
| Language preference | Remembers your chosen locale | Essential (preference) | Up to 12 months |
| Cookie-free analytics (if enabled) | Aggregate usage statistics without cookies or cross-site identifiers | No cookie set | — |
Public pages (enrolment, card pages) set no cookies beyond what is strictly needed to serve them securely.
2. What we do NOT use
- No advertising or retargeting cookies.
- No third-party analytics cookies (no Google Analytics or similar cookie-based tools).
- No cross-site tracking, no fingerprinting, no "consent or pay".
3. If this ever changes
If we ever introduce cookies that require consent, we will first show a compliant consent banner (prior consent, "Reject" as prominent as "Accept", granular choices, easy revocation, consent expiry ≤ 24 months) and update this notice with a new version.
4. Managing cookies
You can delete or block cookies in your browser settings; blocking essential cookies will prevent login from working.
Contact: privacy@loyaflow.com.
Version 1.0-draft · Effective date: [DATE].