Cookie Policy
This policy describes the categories of cookies and similar technologies that may be used on UpFlo, their purpose, their essential characteristics and the means available to users to manage them.
Current status
No advertising cookies; product measurement is active only after consent; no session recording
Essential cookies
Authentication, user context, language and security
Contact
contact@upflo.fr
Reference framework
Applicable CNIL / ePrivacy framework
1. What is a cookie or tracker?
A cookie is a small text file stored on a user's device when visiting a website or online service. Other technologies may have similar effects, such as local storage, session identifiers, anti-bot scripts, pixels or technical tokens.
In this policy, the term cookies covers cookies and comparable trackers used to operate UpFlo, secure the service or remember technical preferences.
2. Strictly necessary trackers used by UpFlo
| Name or category | Purpose | Provider / domain | Indicative duration |
|---|---|---|---|
| Supabase session and authentication cookies (name varies by environment) | Keep the user signed in, refresh server-side authentication and secure account access | UpFlo / authentication service | Session or limited duration depending on authentication settings |
| upflo_active_role | Remember the active role selected by the user in the interface | UpFlo | Up to 180 days or deleted when reset |
| upflo_active_organization_id | Remember the active organisation selected by the user | UpFlo | Up to 180 days or deleted when context is cleared |
| Framework language-preference cookie, when set | Remember display language or facilitate coherent language redirects | UpFlo / i18n framework | Varies with technical configuration |
| Technical cookies set during redirects to third-party providers (payment, authentication) | Allow continuation of flows involving Stripe, Google, LinkedIn or other essential integrations | Relevant third-party provider | According to the third party policy |
Important
The exact names of some technical cookies may vary depending on deployment environment, project configuration and provider evolution.
3. Non-essential trackers
As of the update date of this policy, UpFlo has not identified public-site advertising or retargeting cookies. PostHog and Vercel Analytics are non-essential measurements that are enabled only after explicit acceptance.
When PostHog is allowed, product usage measurement and interaction autocapture may be used to diagnose the service. Event properties are filtered before sending and no session recording is enabled.
Refusal does not prevent any essential feature. The choice can be changed at any time from this page; withdrawal stops collection and disables PostHog persistence in the browser.
| Name or category | Purpose | Provider / domain | Indicative duration |
|---|---|---|---|
| upflo_analytics_consent (cookie and local storage) | Remember the explicit choice, using a versioned cookie value | UpFlo | 180 days |
| upflo_analytics_consent_expires_at (local storage) | Automatically expire the measurement choice | UpFlo | 180 days |
| upflo_analytics_consent_version (local storage) | Invalidate an earlier choice when the consent version changes | UpFlo | 180 days |
| PostHog identifiers, with names varying by project | Measure journeys without session recording after consent | PostHog | According to configuration, removed from the browser on withdrawal |
| Vercel Analytics | Measure navigation after consent | Vercel | Request according to the service |
4. Third-party services and navigation outside the site
When a user relies on a third-party authentication provider or is redirected to a payment provider, cookies or trackers may be managed directly by that provider on its own domain. Such trackers are not always fully controlled by UpFlo.
Users are invited to review the policies of the relevant providers as well, especially Stripe, Google, LinkedIn or any other provider involved in the workflow they use.
5. How to manage cookies
- Configure the browser to block or delete certain cookies, subject to possible consequences on website functionality.
- Use the preference-management button on this page to allow or refuse non-essential measurements.
- Sign out when using a shared device.
- Avoid disabling strictly necessary cookies if the user wishes to keep access to authenticated features, context memorisation or payment and authentication flows.
- Contact UpFlo at the privacy address if any question remains about a tracker or its use.
6. Cookie policy updates
This policy may change depending on technical changes, the addition or removal of third-party services, CNIL guidance or any other applicable regulatory development.
The last update date appears at the top of this document.