GRIDFLOWCommercial OS
Browser storage

Cookie Notice

GridFlow currently uses only the cookies required to keep accounts secure and signed in.

Version 2026-08-13Last updated 13 August 2026UK-first launch
Pre-launch legal draft. This document reflects the product and controls implemented in GridFlow, but remains subject to review by a qualified UK solicitor before commercial launch.

No advertising or optional analytics cookies

GridFlow does not currently use advertising pixels, cross-site tracking or optional analytics cookies. Because the cookies below are strictly necessary to provide and secure a requested account service, GridFlow does not display a consent banner that would imply they can be disabled while using the signed-in app. If optional cookies are introduced, they will remain off until any required consent is obtained and this notice is updated.

Cookies we use

NamePurpose and duration
gridflow_sessionOpaque sign-in token. The readable token is not stored in the database; its hash is checked server-side. HttpOnly, Secure in production, SameSite=Lax. Expires after up to 30 days or earlier on logout/revocation.
gridflow_deviceOpaque trusted-device token used for the two-device security boundary. HttpOnly, Secure in production, SameSite=Lax. Expires after up to 365 days or earlier on device revocation.

Managing cookies

You can clear cookies in your browser or sign out/revoke devices in GridFlow Settings. Clearing either cookie signs the device out or requires it to be trusted again. Browser controls that block strictly necessary cookies will prevent signed-in features from working.

Contact

GridFlow Support
gridflowsupport@gmail.com