Cookie Policy
Last updated: July 20, 2026
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember information about you and how you use them. PaprFlow uses only essential and functional cookies — the minimal amount needed to keep you signed in and remember your preferences. We do not use advertising or tracking cookies, and our product analytics (Section 5) is designed specifically to avoid using a cookie at all.
2. Our cookie inventory
The table below lists every cookie and similar technology PaprFlow sets on your device:
| Name | Type | Purpose | Lifetime | Domain |
|---|---|---|---|---|
| Supabase auth session cookie | Strictly necessary | Keeps you signed in | Per session | paprflow.com |
sidebar_state | Functional | Remembers if your sidebar is open or closed | 7 days | paprflow.com |
That is all. PaprFlow sets only these two cookies.
Stripe cookies
When you visit Stripe's hosted payment pages (during checkout or billing management), Stripe sets its own cookies on stripe.com to process your payment and prevent fraud. Stripe's cookies are governed by Stripe's privacy and cookie policies — we do not control them and do not have access to them.
localStorage (not cookies)
Your browser also stores two small pieces of information locally on your device (this is not a cookie, but similar storage):
- `language`: Your chosen language preference (English or Spanish). Never sent to our servers.
- Greeting dismissal flag: Whether you have dismissed the welcome message. Stored only on your device.
These are your local preferences and are never transmitted to PaprFlow.
3. Why there is no cookie banner
PaprFlow does not use advertising cookies, analytics cookies, tracking pixels, or any non-essential cookies. Cookie-consent banners exist because many sites set advertising or tracking cookies that require opt-in under laws like the EU's ePrivacy rules. PaprFlow sets none, so there is nothing to consent to.
You have the right to control cookies via your browser settings (see Section 4 below).
4. How to control cookies
You can block, delete, or manage cookies through your web browser's settings:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Safari: Preferences → Privacy → Cookies and website data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Edge: Settings → Privacy, search, and services → Cookies and other site data
Important: If you block or delete PaprFlow's essential authentication cookies, you will be signed out and unable to access your account. You will need to sign in again. Non-essential cookies (like sidebar_state) can be blocked without affecting sign-in, though your sidebar preference will not be saved between sessions.
5. Product analytics
PaprFlow uses PostHog for basic product analytics — page views and a small set of named actions (for example, "a student was added" or "a goal was generated") — so we can see which parts of the product are actually used. This is not a cookie: PostHog stores its anonymous identifier in your browser's local storage, not a cookie, so it does not appear in the cookie table in Section 2.
What this analytics use does not do:
- No session replay or screen recording of any kind.
- No advertising, retargeting, or cross-site tracking.
- No student names, labels, free-text notes, or record identifiers are ever sent — only the named action and, at most, a small non-identifying detail like a grade level or a count.
- It does not personally identify you unless you are separately signed in and PaprFlow explicitly links your account (PaprFlow does not currently do this).
6. Third parties
The following vendors set cookies in connection with PaprFlow:
- Supabase: Database and authentication (sets the first-party session cookie listed above on paprflow.com)
- Stripe: Payment processing (sets cookies only on Stripe's domain during checkout)
- PostHog: Product analytics (see Section 5) — uses local storage on paprflow.com, not a cookie
These vendors are contractually bound to use your information only to provide services to PaprFlow and not for their own marketing or profiling purposes.
7. Your rights
You have the right to:
- Access and download your personal data (Settings → Account → Export my data)
- Delete your account and all associated data (Settings → Account → Delete account)
- Disable cookies in your browser
- Contact us with any privacy questions
When you delete your account, all your personal data is deleted immediately. Security audit logs keyed by hashed (non-reversible) identifiers and billing records required by law are retained as necessary.
8. Changes to this policy
PaprFlow may update this Cookie Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by email or through in-app notice before the change takes effect. Your continued use of PaprFlow after any update means you accept the updated policy.
9. Contact us
If you have questions about this Cookie Policy, cookies, or how PaprFlow uses your information, please contact:
Email: support@paprflow.com
Postal address: [PaprFlow, Inc. — confirm entity name upon formation] 7440 Freeport Circle Fontana, CA 92336 United States
This Cookie Policy applies to paprflow.com and the PaprFlow web application.