Cookies
Last updated 11 November 2026
The short version
CiviFlow only uses cookies that are strictly necessary: the ones that keep you signed in to your account. We do not use advertising, tracking or social media cookies, and we do not use Google Analytics. Strictly necessary cookies do not need your consent under the Privacy and Electronic Communications Regulations, which is why we show a notice rather than a consent banner.
Cookies we set
These are set only when you sign in or sign up. If you just read the public pages, none of them are set.
| Name | Set by | What it does | How long |
|---|---|---|---|
| __session | CiviFlow (via Clerk) | Keeps you signed in to your account. Short-lived and refreshed while you use the site. | About a minute, renewed automatically |
| __client_uat | CiviFlow (via Clerk) | Records when your sign-in last changed, so the site knows whether to check it. | Until you sign out, or long-lived |
| __client | Clerk, on our sign-in domain | Holds your signed-in session securely so a new short-lived session can be issued. | Until you sign out |
| __clerk_handshake and similar __clerk_* names | CiviFlow (via Clerk) | Passes your sign-in state between our pages and the sign-in service. | Seconds |
Our sign-in service (Clerk) may also store short-lived sign-in details in your browser’s local storage, for the same purpose.
Things that are not cookies
We count visits and measure page speed with Vercel Web Analytics and Speed Insights. They do not set cookies or use fingerprinting, and they report numbers in aggregate, not who you are. We record website errors with Sentry, with IP addresses, cookies and form contents removed before anything leaves your browser.
When you close the cookie notice we remember that in your browser’s local storage (under the name civiflow-cookie-notice) so it does not appear on every page. Nothing about you is stored there.
Payments
When you subscribe you pay on Stripe’s own checkout pages. Stripe sets its own cookies there to process the payment securely and prevent fraud; see Stripe’s cookie policy for details.
Turning cookies off
You can block or delete cookies in your browser settings. The public pages work without them, but you will not be able to sign in to your account.
Changes and questions
If we ever add a cookie that is not strictly necessary, we will ask for your consent before setting it and update this page first. Questions to info@variationflow.com. More on how we handle personal data is in our privacy notice.