Skip to main content
← Back to legal
PolicyEffective March 15, 2026Updated October 30, 2026Reviewed October 30, 2026

Cookie Policy

How CustomerFlows uses cookies, local storage, attribution identifiers, and consent controls across the website and application.

1. What Are Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognize your device and remember information about your visit, such as your preferences, login status, and browsing behavior.

Similar technologies include web beacons (also called pixel tags or clear GIFs), local storage, and session storage. This policy covers all of these technologies collectively referred to as "cookies."


2. How We Use Cookies

CustomerFlows uses cookies for the following purposes:

2.1 Strictly Necessary Cookies

These cookies are essential for the operation of our website and application. They enable core functionality such as security, account authentication, and session management. You cannot opt out of strictly necessary cookies because the service cannot function without them.

CookiePurposeDurationType
cf_sessionMaintains your authenticated session in the CustomerFlows applicationSession (expires on browser close)First-party
cf_csrfProtects against cross-site request forgery attacksSessionFirst-party
sb-access-tokenSupabase authentication token for secure API access1 hour (refreshed automatically)First-party
sb-refresh-tokenSupabase token refresh for maintaining login state7 daysFirst-party
cf_cookie_consentRemembers your cookie choice on customerflows.com and app.customerflows.com, so you answer once for both. Also kept in browser storage in case cookies are blocked6 months, then you are asked again (browser storage copy: until you clear it)First-party

2.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our website's performance and user experience.

CookiePurposeDurationType
_cf_analyticsTracks page views and visitor behavior on customerflows.com (our own analytics, not third-party)30 daysFirst-party
_gaGoogle Analytics: tells visits from different browsers apart on customerflows.com and app.customerflows.com2 yearsFirst-party, set by Google Analytics
_ga_<ID>Google Analytics: keeps track of the current visit2 yearsFirst-party, set by Google Analytics

We use Google Analytics 4 on the website and in the application to see how people find and use them. In the EEA, the UK and Switzerland it sets these cookies only after you accept them in the cookie banner (section 5.1). CustomerFlows does not use Facebook Pixel or other third-party advertising trackers.

2.3 Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your language preference or display settings.

CookiePurposeDurationType
cf_themeRemembers your preferred display theme (light/dark)12 monthsFirst-party
cf_localeStores your language preference (English/Arabic)12 monthsFirst-party
cf_pipeline_viewRemembers your preferred pipeline view (Kanban/List)12 monthsFirst-party

2.4 Marketing and Attribution Cookies

These cookies are used to track the effectiveness of our marketing campaigns and to attribute website visits to their source (e.g., Google Ads, Meta Ads). These cookies are only set when you arrive on our website from an advertising link.

CookiePurposeDurationType
cf_gclidStores the Google Click Identifier from Google Ads campaigns for attribution90 daysFirst-party
cf_fbclidStores the Facebook Click Identifier from Meta Ads campaigns for attribution90 daysFirst-party
cf_utm_sourceStores the UTM source parameter for campaign tracking30 daysFirst-party
cf_utm_mediumStores the UTM medium parameter for campaign tracking30 daysFirst-party
cf_utm_campaignStores the UTM campaign parameter for campaign tracking30 daysFirst-party
cf_refStores the referring domain for attribution30 daysFirst-party

Important: All marketing and attribution cookies are first-party cookies stored on your device. CustomerFlows does not share this data with advertising platforms. The attribution data is used solely to help our customers (contractors) understand which of their own advertising campaigns produce leads and revenue.


3. Third-Party Cookies

3.1 Supabase (Authentication)

Our authentication system is powered by Supabase. When you log in to CustomerFlows, Supabase may set authentication-related cookies to manage your session securely. These are strictly necessary for the application to function.

3.2 Stripe (Payment Processing)

When you visit our pricing page or enter payment information, Stripe may set cookies to process payments securely and prevent fraud.

3.3 Google OAuth

If you choose to sign in with Google, Google may set cookies as part of the OAuth authentication flow. These cookies are managed by Google and are subject to Google's privacy policy.

CustomerFlows does not use any third-party advertising cookies, retargeting pixels, or social media tracking pixels on its website or application.


4. The CustomerFlows Tracking Snippet (For Our Customers' Websites)

CustomerFlows provides a tracking snippet (tracking.js) that our customers install on their own websites to enable visitor tracking and ad attribution. This tracking snippet:

  • Sets first-party cookies on the customer's domain (not on customerflows.com)
  • Captures visitor source, page views, and advertising click identifiers (GCLID, FBCLID)
  • Does not collect personal information from anonymous visitors
  • Does not share data with third-party advertising platforms

If you are a visitor to a website that uses CustomerFlows tracking, the cookies set by the tracking snippet are governed by that website's own cookie policy, not this one. This policy covers only cookies on customerflows.com and app.customerflows.com.


If you visit customerflows.com or app.customerflows.com from the European Economic Area, the United Kingdom or Switzerland, a banner asks whether you accept analytics and ad attribution cookies. Until you accept, Google Analytics stores no cookies on your device. Strictly necessary cookies cannot be declined because the website and application need them to work.

Your choice is saved in the cf_cookie_consent cookie and applies to both the website and the application, so you are asked once. It lasts 6 months, after which you are asked again. You can change it at any time with the "Cookie settings" link in the website footer, in the application's account menu, or under the application's sign-in form.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

  • View cookies currently stored on your device
  • Delete cookies individually or in bulk
  • Block cookies from specific websites or all websites
  • Set your browser to notify you when a cookie is being set

Please note that blocking strictly necessary cookies may prevent you from using CustomerFlows.

How to manage cookies in common browsers:

  • Chrome: Settings > Privacy and Security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and site permissions > Manage and delete cookies

6. Data Retention

Cookie CategoryRetention PeriodWhat Happens After Expiry
Strictly necessarySession or up to 7 daysAutomatically deleted; you'll need to log in again
Analytics30 daysAutomatically deleted
Functional12 monthsAutomatically deleted; preferences reset to defaults
Marketing / attribution30–90 daysAutomatically deleted; new visits are treated as new sessions

7. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you through our website or application.


8. Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

  • Email: privacy@customerflows.com
  • Company: Keilani Media Group LLC
  • Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States

Keep reading

Ready to put this into practice?

Use the same system on your own lead flow.

CustomerFlows gives you the AI chatbot, trade-ready pipelines, and attribution layer to run the workflow you just read about.