What cookies are and what we use
A cookie is a small file the site stores in your browser. Here we also cover other ways of storing data on your device (local storage and browser cache), because cookie rules treat them the same.
Summary: FlexiFlow only uses strictly necessary technical storage. We do not use analytics, advertising or tracking cookies, nor any third-party cookies. That is why there is no cookie banner: nothing requires your consent.
Cookies and storage used by the website and the app
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| ff_session | First-party | Keeps you signed in to the platform. | 14 days (or until you sign out) | Strictly necessary |
| ocrf_session | First-party (invoice reader) | Keeps you signed in to the “Expenses with AI” invoice reader. | 7 days (or until you sign out) | Strictly necessary |
| ff_back | First-party (invoice reader) | Remembers the platform address for the “Back” button. | 1 year | Technical (functional) |
| ff_lang | First-party (invoice reader) | Remembers the language chosen in the invoice reader. | 1 year | Technical (a preference you choose) |
| ff_md_inv | First-party | Remembers an invitation to a “My money” household while you sign up or sign in. | Until the invitation expires | Strictly necessary |
| localStorage: ff_install_dismissed | First-party | Remembers that you dismissed the “Install on your phone” notice so it is not shown again right away. | 30 days (or until you clear it) | Technical (a preference you choose) |
| Cache Storage (service worker) | First-party | Stores the site's own files (styles, scripts, offline page) on your device so the installed app loads fast and shows a notice when offline. | Until the site version updates | Strictly necessary |
Session cookies carry the HttpOnly and SameSite=Lax flags, and in production also Secure (they only travel over HTTPS).
Technical cookies: no consent needed
Cookies that are strictly necessary to provide the service you asked for (keeping the session, remembering an invitation, storing the offline copy of the installed app) are exempt from prior consent under article 22.2 of the LSSI-CE. Preferences you choose yourself (reader language, dismissing the install notice) are stored to respect your choice.
Payments
When you pay, we send you to Stripe's page. Stripe may use its own cookies there, under its own policy. We do not control them. Your card details do not pass through our servers.
How to manage or delete cookies
You can delete or block cookies in your browser settings. If you block the technical ones, your session will not be kept and you will not be able to use the application. To clear local storage and the installed app's cache, use your browser settings or uninstall the app.
Changes to this policy
If we add cookies that are not technical, we will update this page and ask for your consent before using them.
More information
About your personal data: Privacy policy. Questions: [PRIVACY EMAIL — PENDIENTE].