Clipflow← Home

Policy · Cookies

Cookie policy.

Last updated · April 17, 2026

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They let a site remember you across pages and between sessions. Clipflow uses cookies and similar local-storage mechanisms only where necessary to run the service.

2. Cookies we use

2.1 Strictly necessary

  • Authentication session — Supabase sets a secure, HTTP-only cookie after you sign in so the app knows you're logged in. Without this you cannot access the workspace.
  • Current workspace — a small cookie (clipflow.current_workspace) remembers which workspace you last used, so navigating to the dashboard lands on the right one.
  • CSRF protection — Next.js sets a token cookie to prevent cross-site request forgery on server actions.

These are exempt from consent under GDPR Art. 5(3) and the ePrivacy Directive because the service cannot function without them.

2.2 Functional (opt-in)

  • UI preferences — theme, sidebar state, keyboard-shortcut dismiss flags — stored in your browser's localStorage, never sent to our servers. Clearing site data removes them.

2.3 Analytics

We do not use third-party analytics cookies (no Google Analytics, no Facebook Pixel, no Hotjar). Server-side event logging uses only the authenticated session — no cross-site tracking.

2.4 Advertising

We do not run ads and set no advertising cookies.

3. Third-party services

Some features load third-party scripts that may set their own cookies when you actively use them:

  • Stripe Checkout — when you click “Subscribe”, Stripe's checkout page (not ours) sets cookies required for fraud prevention. Covered by Stripe's privacy policy.
  • Error tracking (Sentry) — when enabled in production, Sentry may set a session cookie to correlate errors across pages. No PII is captured.

4. Your choices

  • You can block all cookies in your browser settings — but then the service cannot keep you logged in and will not work.
  • Clearing your browser's local storage removes all functional preferences (you'll see the first-run tips again).
  • You can delete your account from Settings → Profile — this removes all server-side data along with the cookies it sets.

5. Changes to this policy

We'll update this page when our cookie usage changes and list the change in our changelog. Material changes (new trackers, new third parties) will prompt an in-app notice on your next login.

6. Contact

Questions about cookies? Email privacy@clipflow.to.

This policy is provided as plain-language summary, not legal advice. See our Privacy Policy and Terms of Service for the full legal basis.