Skip to main content
Back to legal
PolicyEffective March 15, 2026Updated March 15, 2026Reviewed March 15, 2026

Cookie Policy

How CustomerFlows uses cookies, local storage, attribution identifiers, and consent controls across the website and application.

1. What Are Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognize your device and remember information about your visit, such as your preferences, login status, and browsing behavior.

Similar technologies include web beacons (also called pixel tags or clear GIFs), local storage, and session storage. This policy covers all of these technologies collectively referred to as "cookies."


2. How We Use Cookies

CustomerFlows uses cookies for the following purposes:

2.1 Strictly Necessary Cookies

These cookies are essential for the operation of our website and application. They enable core functionality such as security, account authentication, and session management. You cannot opt out of strictly necessary cookies because the service cannot function without them.

CookiePurposeDurationType
cf_sessionMaintains your authenticated session in the CustomerFlows applicationSession (expires on browser close)First-party
cf_csrfProtects against cross-site request forgery attacksSessionFirst-party
sb-access-tokenSupabase authentication token for secure API access1 hour (refreshed automatically)First-party
sb-refresh-tokenSupabase token refresh for maintaining login state7 daysFirst-party
cf_consentStores your cookie consent preferences12 monthsFirst-party

2.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our website's performance and user experience.

CookiePurposeDurationType
_cf_analyticsTracks page views and visitor behavior on customerflows.com (our own analytics, not third-party)30 daysFirst-party

CustomerFlows does not use Google Analytics, Facebook Pixel, or any third-party analytics trackers on its marketing website. We use our own first-party analytics system to track aggregate visitor behavior without transmitting data to third parties.

2.3 Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your language preference or display settings.

CookiePurposeDurationType
cf_themeRemembers your preferred display theme (light/dark)12 monthsFirst-party
cf_localeStores your language preference (English/Arabic)12 monthsFirst-party
cf_pipeline_viewRemembers your preferred pipeline view (Kanban/List)12 monthsFirst-party

2.4 Marketing and Attribution Cookies

These cookies are used to track the effectiveness of our marketing campaigns and to attribute website visits to their source (e.g., Google Ads, Meta Ads). These cookies are only set when you arrive on our website from an advertising link.

CookiePurposeDurationType
cf_gclidStores the Google Click Identifier from Google Ads campaigns for attribution90 daysFirst-party
cf_fbclidStores the Facebook Click Identifier from Meta Ads campaigns for attribution90 daysFirst-party
cf_utm_sourceStores the UTM source parameter for campaign tracking30 daysFirst-party
cf_utm_mediumStores the UTM medium parameter for campaign tracking30 daysFirst-party
cf_utm_campaignStores the UTM campaign parameter for campaign tracking30 daysFirst-party
cf_refStores the referring domain for attribution30 daysFirst-party

Important: All marketing and attribution cookies are first-party cookies stored on your device. CustomerFlows does not share this data with advertising platforms. The attribution data is used solely to help our customers (contractors) understand which of their own advertising campaigns produce leads and revenue.


3. Third-Party Cookies

3.1 Supabase (Authentication)

Our authentication system is powered by Supabase. When you log in to CustomerFlows, Supabase may set authentication-related cookies to manage your session securely. These are strictly necessary for the application to function.

3.2 Stripe (Payment Processing)

When you visit our pricing page or enter payment information, Stripe may set cookies to process payments securely and prevent fraud.

3.3 Google OAuth

If you choose to sign in with Google, Google may set cookies as part of the OAuth authentication flow. These cookies are managed by Google and are subject to Google's privacy policy.

CustomerFlows does not use any third-party advertising cookies, retargeting pixels, or social media tracking pixels on its website or application.


4. The CustomerFlows Tracking Snippet (For Our Customers' Websites)

CustomerFlows provides a tracking snippet (tracking.js) that our customers install on their own websites to enable visitor tracking and ad attribution. This tracking snippet:

  • Sets first-party cookies on the customer's domain (not on customerflows.com)
  • Captures visitor source, page views, and advertising click identifiers (GCLID, FBCLID)
  • Does not collect personal information from anonymous visitors
  • Does not share data with third-party advertising platforms
  • Respects Do Not Track (DNT) browser headers

If you are a visitor to a website that uses CustomerFlows tracking, the cookies set by the tracking snippet are governed by that website's own cookie policy, not this one. This policy covers only cookies on customerflows.com and app.customerflows.com.


When you first visit customerflows.com, a cookie consent banner allows you to accept or decline optional cookies (analytics, functional, and marketing). Strictly necessary cookies cannot be declined because they are required for the website and application to function.

Your preference is stored in the cf_consent cookie for 12 months. You can change your preferences at any time by clicking the "Cookie Preferences" link in the website footer.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

  • View cookies currently stored on your device
  • Delete cookies individually or in bulk
  • Block cookies from specific websites or all websites
  • Set your browser to notify you when a cookie is being set

Please note that blocking strictly necessary cookies may prevent you from using CustomerFlows.

How to manage cookies in common browsers:

  • Chrome: Settings > Privacy and Security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and site permissions > Manage and delete cookies

5.3 Do Not Track

CustomerFlows respects the Do Not Track (DNT) signal sent by your browser. When DNT is enabled, we do not set analytics or marketing cookies on your device.


6. Data Retention

Cookie CategoryRetention PeriodWhat Happens After Expiry
Strictly necessarySession or up to 7 daysAutomatically deleted; you'll need to log in again
Analytics30 daysAutomatically deleted
Functional12 monthsAutomatically deleted; preferences reset to defaults
Marketing / attribution30–90 daysAutomatically deleted; new visits are treated as new sessions

7. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you through our website or application.


8. Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

  • Email: [email protected]
  • Company: Keilani Media Group LLC
  • Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States

Keep reading

Ready to put this into practice?

Use the same system on your own lead flow.

CustomerFlows gives you the AI chatbot, trade-ready pipelines, and attribution layer to run the workflow you just read about.