Cookie Policy
1. Overview
This policy explains how Flostac uses cookies and similar technologies (local storage and session storage) on flostac.in, our marketing website, and app.flostac.in, the Flostac application. For how we handle personal data more broadly, see our Privacy Policy.
In short: we use the cookies needed to keep you signed in and the product working, one preference cookie for your theme, and our own first-party analytics on the marketing site. We do not use advertising cookies, and we do not use third-party analytics such as Google Analytics, Meta Pixel, Mixpanel or PostHog.
2. What cookies are
Cookies are small text files a website stores in your browser so it can remember you between pages and visits. Local storage and session storage work in a similar way. In this policy we call all of them “cookies”.
3. Cookies we use
Strictly necessary
These are required for the app to work, such as keeping you signed in and protecting sign-in and payment flows. They cannot be switched off without breaking the service, so they do not need your consent.
| Name | Purpose | Type | Duration |
|---|---|---|---|
sb-<id>-auth-token | Keeps you signed in to app.flostac.in. Holds a short-lived access token that refreshes automatically while you use the app. | Cookie, first-party | Up to 400 days, or until you sign out |
flostac:active-workspace-id | Remembers which workspace you have open. | Cookie, first-party | Until you close the browser |
flostac_meta_oauth_return | Protects the Meta (Facebook / Instagram) connection flow and returns you to the right page afterwards. | Cookie, first-party, HTTP-only | 10 minutes |
flostac_signup_return | Returns you to the right page after signing up with Google. | Cookie, first-party | Deleted once sign-up finishes |
flostac_dodo_checkout | Remembers the plan you chose while you complete checkout. | Cookie, first-party | 2 hours |
Functional
These remember choices you make. If you block them the site still works and falls back to your device's system setting.
| Name | Purpose | Type | Duration |
|---|---|---|---|
flostac.theme | Remembers your light or dark theme choice. | Cookie, first-party | 1 year |
Analytics
flostac.in uses Flostac's own traffic analytics, the same tool our customers use on their websites, to understand how people find and use the site. The data is processed by Flostac only and is never sold or shared with advertisers.
| Name | Purpose | Type | Duration |
|---|---|---|---|
flostac.tracker.vid | A random visitor ID used to count returning visitors to flostac.in. | Local storage, first-party | 1 year, or until you clear site data |
flostac.tracker.sid | Groups the pages you view into a single visit. | Session storage, first-party | 30 minutes of inactivity, or when the tab closes |
It records the pages you view, the referring website, campaign tags in the link (UTM parameters), screen size, browser language, device type, country, scroll depth, time on page, clicks on outbound, WhatsApp, phone and email links, and that a form was submitted. It never records what you type into a form. Your IP address is used only to determine your country and to prevent abuse, and is stored as a one-way hash, never in full.
Advertising
We do not use advertising or cross-site tracking cookies.
4. How long you stay signed in
When you sign in to app.flostac.in, you stay signed in on that browser until you sign out, so you don't have to log in every time you visit. Behind the scenes, the access token in your session lasts a short time and is refreshed automatically while you use the app, and the session cookie expires after at most 400 days.
- Sign out from the account menu to end your session on that browser immediately.
- On a shared or public computer, always sign out when you finish, or use a private / incognito window.
5. Your choices
- Browser settings: you can block or delete cookies and site data at any time. Blocking strictly necessary cookies will stop you from signing in.
- Do Not Track: if your browser sends the Do Not Track signal, our analytics does not run at all. No visitor or session ID is stored and no page views are recorded.
- Private browsing: cookies and site data are cleared when you close a private or incognito window.
6. Changes to this policy
If we add, remove or change any non-essential cookies, we will update this page and the “Last updated” date above. Where the law requires consent, we will ask for it before the change takes effect.
7. Contact
Questions about this policy? Email us at team.flostac@gmail.com.