Cookie Notice
Last updated September 28, 2026
This notice explains the cookies and similar technologies RecFlow uses, and how to control them. It supplements our Privacy Policy.
What these technologies are
Cookies are small text files a website stores on your device. We also use your browser's local storage in a similar way. We group these into strictly necessary (the Service cannot function without them), functional (they remember your preferences), and analytics or advertising (we do not currently use any).
Cookies we use
| Name | Set by | Purpose | Category | Retention |
|---|---|---|---|---|
sb-<project>-auth-token | RecFlow (Supabase) | Keeps you signed in and refreshes your session | Strictly necessary | Session; refresh token up to ~1 year |
recflow-active-org | RecFlow | Remembers which organization your dashboard is showing | Functional | 1 year |
rf_src | RecFlow | Set when you open a facility's marketing link or QR code (recflow.us/p/…). Remembers which flyer, post or email brought you, so the facility can see whether it led to a booking. Holds only an ID for that piece of marketing, nothing about you. | Functional | 7 days |
__stripe_mid | Stripe | Fraud prevention on pages that contain a payment form | Strictly necessary | 1 year |
__stripe_sid | Stripe | Fraud prevention on pages that contain a payment form | Strictly necessary | 30 minutes |
Local storage
We store one preference in your browser's local storage — rf.sidebar.collapsed — to remember whether you collapsed the dashboard sidebar. It stays on your device and is not sent to our servers.
Analytics and advertising
RecFlow does not use advertising or third-party tracking cookies. We record limited organizer product events on our servers to improve the Service; this does not use an analytics cookie. The first-party rf_src cookie above remembers the marketing link you opened so we can count the visit without recording who you are, and credit a booking you make within 7 days to that link. If this changes, we will update this notice and, where required, ask for your consent first.
Managing cookies
You can delete or block cookies through your browser settings, and set your browser to warn you before accepting them. Blocking strictly necessary cookies will prevent you from signing in and using core features. Stripe's cookies are described in Stripe's Cookie Policy.
Contact
Questions: privacy@recflow.us.