Cookie Policy

Contents

What are cookies?
How we use cookies
Cookies we set
Third-party cookies
Local storage and session storage
Managing and disabling cookies
Updates to this policy

We do not use advertising or tracking cookies. We never share cookie data with advertising networks.

1. What are cookies?

Cookies are small text files that a website stores on your device when you visit. They allow the website to remember certain information about your visit — such as whether you are logged in or your preferences — the next time you return.

Cookies are set either by the website you are visiting ("first-party cookies") or by third-party services that the website uses ("third-party cookies"). Some cookies are deleted when you close your browser ("session cookies"), while others persist on your device until they expire or you delete them ("persistent cookies").

2. How we use cookies

InvoiceFlow uses cookies for three purposes:

Authentication and session management: to keep you securely logged in as you navigate the application.
Preferences: to remember your settings, such as your chosen sidebar state or display preferences.
Analytics: to understand how the product is used so we can improve it. Analytics data is aggregated and does not identify you personally.

We do not use cookies for advertising, retargeting, or to track your activity across other websites.

Cookie name	Type	Purpose	Duration
`if_session`	Essential	Keeps you securely authenticated during your session. Required for the application to function.	Session (deleted when browser is closed)
`if_remember`	Essential	Remembers your login across browser restarts if you select "Remember me" at login.	30 days
`if_csrf`	Essential	Cross-site request forgery protection token. Prevents malicious sites from making requests on your behalf.	Session
`if_prefs`	Essential	Stores your UI preferences such as sidebar collapsed/expanded state and display density.	1 year
`_if_analytics`	Analytics	Tracks anonymised usage patterns (pages visited, features used, session duration). Contains a randomly generated ID — not linked to your account.	13 months

4. Third-party cookies

We use a small number of third-party services that may set their own cookies:

Stripe: our payment processor sets cookies when you enter payment details as part of account setup. These cookies are used for fraud prevention and to maintain the security of the payment flow. See Stripe's cookie information.
Analytics service: we use a privacy-first analytics tool (self-hosted) that does not use third-party cookies or share data with external platforms. All analytics data is stored on our own servers.

We do not embed social media widgets, advertising pixels, or third-party tracking scripts on any page of the InvoiceFlow application.

5. Local storage and session storage

In addition to cookies, InvoiceFlow uses your browser's localStorage to store certain application data on your device. This is different from cookies — localStorage data is not transmitted to our servers with every request, and it has no expiry date unless explicitly cleared.

We use localStorage to store:

Your trial setup status and chosen plan (key: IF_trial_setup) — so the application knows your account is active when you reopen it.
A flag indicating whether you have previously completed a trial (key: IF_ever_trialed) — used to ensure trial periods are not granted more than once.
Application state such as selected filters and in-progress invoice drafts.

This data does not leave your device except when you explicitly save or sync within the application. You can clear localStorage data at any time through your browser's developer tools or by clearing your site data.

6. Managing and disabling cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

View all cookies and local storage data stored by websites you have visited.
Delete some or all cookies for a specific website, or all cookies globally.
Block cookies from specific websites or block all third-party cookies.
Set your browser to notify you before accepting cookies.

Instructions for managing cookies in the most popular browsers:

Please note: disabling essential cookies will prevent InvoiceFlow from functioning correctly. You will not be able to stay logged in or use the application without them. Analytics cookies can be disabled without affecting the core functionality of the application.

7. Updates to this policy

We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our use of cookies. We will notify you of material changes by email or via a notice within the application. The date at the top of this page will always reflect when it was last updated.

If you have any questions about our use of cookies, contact us at privacy@invoiceflow.app.