No advertising or optional analytics cookies
GridFlow does not currently use advertising pixels, cross-site tracking or optional analytics cookies. Because the cookies below are strictly necessary to provide and secure a requested account service, GridFlow does not display a consent banner that would imply they can be disabled while using the signed-in app. If optional cookies are introduced, they will remain off until any required consent is obtained and this notice is updated.
Cookies we use
NamePurpose and duration
gridflow_sessionOpaque sign-in token. The readable token is not stored in the database; its hash is checked server-side. HttpOnly, Secure in production, SameSite=Lax. Expires after up to 30 days or earlier on logout/revocation.gridflow_deviceOpaque trusted-device token used for the two-device security boundary. HttpOnly, Secure in production, SameSite=Lax. Expires after up to 365 days or earlier on device revocation.Managing cookies
You can clear cookies in your browser or sign out/revoke devices in GridFlow Settings. Clearing either cookie signs the device out or requires it to be trusted again. Browser controls that block strictly necessary cookies will prevent signed-in features from working.
Contact
GridFlow Support
gridflowsupport@gmail.com