EarnFlowCookie Policy
EarnFlow uses a small number of strictly necessary cookies and browser storage to keep you signed in and remember your preferences. We use no advertising cookies and no third-party analytics on this website, so there is no cookie banner to click.
What cookies are
Cookies are small text files a website stores in your browser. Related technologies include local storage, which stores settings in your browser without sending them to a server, and device tokens in mobile apps. This policy covers all of them.
This website (earnflow.ca)
The marketing website sets no cookies of its own. Fonts, images, styles and scripts are served from earnflow.ca, not from third-party content networks, so no third party is contacted when you read a page. Links to the EarnFlow app take you to app.earnflow.ca, where the cookies below apply.
The EarnFlow web app (app.earnflow.ca)
| Name / type | Purpose | Duration | Category |
|---|---|---|---|
| Refresh-token cookie (HttpOnly, Secure, SameSite) | Keeps you signed in and lets the app obtain short-lived access tokens without storing long-lived credentials in page scripts. Rotated on each use; reuse is detected and ends the session. | Until you sign out, your session is revoked, or it expires | Strictly necessary |
| CSRF token cookie | Protects forms and the sign-in flow against cross-site request forgery. | Session | Strictly necessary |
| Local storage: theme | Remembers whether you chose the light or dark theme. | Until cleared | Preference |
| Local storage: interface state | Remembers small interface choices such as a collapsed sidebar or the last organization you opened. | Until cleared | Preference |
| Web Locks (in-browser) | Coordinates token refresh between open tabs so that two tabs don't refresh at once. Nothing is stored or sent. | Momentary | Strictly necessary |
Online payment pages are hosted by Stripe and may set Stripe's own cookies for fraud prevention; Stripe's cookie policy applies there. Map tiles in the app are loaded from Google Maps Platform, which may use its own cookies according to Google's policies.
Mobile apps
The EarnFlow mobile apps do not use cookies. They store sign-in tokens in the device's secure keychain and, if you enable notifications, a push token used only to deliver them. They do not use advertising identifiers.
Your choices
You can block or delete cookies in your browser settings. Blocking the strictly necessary cookies will prevent you from signing in to the web app. Clearing local storage resets your preferences. Because we don't use advertising or analytics cookies, there is nothing further to opt out of, and we honour browser Global Privacy Control signals by not selling or sharing personal information in any case.
Changes and contact
We will update this page if the cookies we use change. Questions: privacy@earnflow.ca. See also our Privacy Policy.