Cookie Statement
Version 2026-09. Draft pending legal review.
The Pageflow app and website
We use only cookies that the Service needs to work:
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session cookie | Keeps you signed in | Until you close the browser, or longer with "Remember me" |
XSRF-TOKEN |
Protects forms against cross-site request forgery | Session |
| Firebase sign-in storage | Keeps your sign-in state in the browser's local storage | Until you sign out |
We do not use advertising or third-party tracking cookies, so there is no cookie banner.
Published sites
Sites built with Pageflow set no cookies by default. Our visitor analytics are cookieless (see the Privacy Policy).
A site owner can add their own tools, such as Google Analytics or a YouTube video, which may set cookies. The site owner is responsible for those cookies and for any consent they need.