Cookie policy
Which cookies and equivalent technologies we use, what for, and how you change your choice at any time.
Last updated: [EFFECTIVE DATE]
Fields in square brackets ([…]) are waiting on the company’s official details and are filled in before public launch.
What cookies are
They are small files your browser stores on your device. We also use browser local storage, which follows the same rules. Cookies that are not strictly necessary are only used with your consent, under article 5(3) of Directive 2002/58/EC, article 6(1)(a) GDPR and article 7, I LGPD.
What we store, one by one
Every cookie and every browser storage key eFlow sets is listed below. There is nothing else. The only third-party ones are the two Google Analytics cookies and the PostHog one, and they exist only if you accept optional cookies. We keep this table in step with the application: whenever we add or remove a cookie or a storage key, it is updated here. A new tool is switched on only after it appears in this table and we have asked for your consent.
| Name | Provider | Purpose | Lifetime | Category |
|---|---|---|---|---|
| auth_token | eFlow — cookie set by our API | Keeps you signed in. Set when you sign in or create an account, removed when you sign out. | 30 days | Strictly necessary |
| adonis-session | eFlow — cookie set by our API | Session identifier the API framework sets on every response. It carries no data about you. | 2 hours | Strictly necessary |
| has_session | eFlow — storage in your browser | Records in this browser that you signed in, so the application can return you to the sign-in page when the API refuses a request. | Until you clear your browser data | Strictly necessary |
| cookie_consent | eFlow — storage in your browser | Your cookie choice and the date you made it. | Until you clear your browser data | Strictly necessary |
| signup.referralCode | eFlow — storage in your browser | The invite code from the link you followed, so the account you create can be credited to whoever invited you. | Until you close the tab | Strictly necessary |
| eflow.videoEditor.state.<id> | eFlow — storage in your browser | A local copy of the timeline you are editing in the Video Editor, one entry per project, kept as a backup of the version stored on our servers. | Until you clear your browser data | Strictly necessary |
| eflow-locale | eFlow — storage in your browser | The interface language you chose. | Until you clear your browser data | Preferences |
| eflow-theme | eFlow — storage in your browser | Whether you use the light or the dark interface. | Until you clear your browser data | Preferences |
| eflow-sidebar-pinned | eFlow — storage in your browser | Whether you keep the side menu open. | Until you clear your browser data | Preferences |
| eflow-active-project | eFlow — storage in your browser | The last project you opened, so the workspace reopens on it. | Until you clear your browser data | Preferences |
| tour-seen:<id> | eFlow — storage in your browser | Which guided tours you have already seen, one entry per tour, so they are not shown again. | Until you clear your browser data | Preferences |
| eflow-email-verification-dismissed:<id> | eFlow — storage in your browser | That you dismissed the notice asking you to verify your email address, one entry per account. | Until you clear your browser data | Preferences |
| photo-upload-tutorial-seen | eFlow — storage in your browser | That you have already seen the photo upload tutorial. | Until you clear your browser data | Preferences |
| first-generation-seen | eFlow — storage in your browser | That you have already seen the explanation of your first generation. | Until you clear your browser data | Preferences |
| ve.timeline.snapping | eFlow — storage in your browser | Whether snapping is on in the Video Editor timeline. | Until you clear your browser data | Preferences |
| _ga | Google Ireland Limited — Google Analytics 4 | Tells your browser apart from others so we can count visitors. Only written if you accept optional cookies. | 2 years | Analytics |
| ph_<id>_* | PostHog — product analytics, hosted in the United States | Identifies your browser across visits so we can measure how many people use each feature. It holds a random identifier, never your name, email or the contents of your listings. It lives as a cookie, as a local storage entry and as a few session storage entries, all under the same prefix, and is only written if you accept optional cookies. | 1 year | Analytics |
| _ga_NEWKT9TF86 | Google Ireland Limited — Google Analytics 4 | Holds the state of your visit so the pages you open are grouped into one session. Only written if you accept optional cookies. | 2 years | Analytics |
Strictly necessary
They keep you signed in, remember your cookie decision and hold the work in progress you have not saved yet. The application does not work without them, so they do not depend on consent.
Preferences
They store interface choices such as light or dark theme, language, the sidebar state and notices you have dismissed. They stay in your browser and never leave it.
Analytics
They help us see which pages are used and where the product fails. They are only switched on if you accept optional cookies. We use Google Analytics 4, operated by Google Ireland Limited, with advertising identifiers and ad personalisation off. Until you accept, the script is not loaded: nothing reaches Google and no cookie is written. If you switch to "essential only", collection is turned off and both cookies are deleted from this browser. We also use PostHog, hosted in the United States, to see which features are used and where the journey stalls. It is configured not to record clicks or on-screen text automatically, not to record video sessions, and not to store your IP address; page addresses are sent without the part after the "?", which is where tokens live. Until you accept, the script is not loaded. If you switch to "essential only", collection stops and every PostHog key is deleted from this browser.
Marketing
These would measure campaigns and personalise ads. We use no marketing cookies today. If we start, we will ask for consent before switching them on and update this page.
How to change your choice
Open the cookie settings from the button in the footer of any page. Your decision is recorded with its date and replaces the previous one.
Browser controls
You can block or delete cookies in your browser settings. If you block the strictly necessary ones, the session ends and you will not be able to use the application.
Changes to this policy
We may update this policy. The table above is updated whenever we add or remove a cookie or a storage key, and if we start using analytics or marketing cookies their rows are added to it and we ask for your consent again before switching them on.
Questions
Write to [PRIVACY EMAIL].