Cookies & similar technologies

Cookies are small data files saved by your browser. We also use localStorage and sessionStorage — the same idea, stored on your device. In this policy we use the word "cookies" to cover all of these technologies.

Strictly to operate the service: keeping your session active, remembering your "Remember me" choice, protecting your account from abuse, and measuring overall site usage in an anonymous way. Subscription payments are handled entirely inside the Google Play Store and are not part of TradersFlow's own cookies.

These are required for TradersFlow to function. They cannot be turned off without breaking core features.

• Session token (browser storage) — keeps you signed in across pages.
• "Remember me" flag — remembers whether you ticked the box at sign-in.
• Preferences — small flags like theme, language, appearance and last-used view, stored locally.
• Anonymous analytics identifier — a random ID (and a per-launch session ID) held in browser/app storage so we can measure our own sign-up funnel. It is not an advertising identifier and is not shared with third parties.
• CSRF / request integrity tokens — short-lived values that protect form submissions.

Set by our authentication provider (Supabase) to manage your sign-in session, refresh expired access tokens, and link Google sign-ins back to your TradersFlow account. These are essential — without them you cannot stay signed in.

Set by Cloudflare in front of our application to detect abusive traffic, block bots, and protect against denial-of-service attacks. These cookies do not identify you personally; they identify suspicious request patterns.

We do not use a third-party website analytics product, advertising cookies or cross-site trackers.

We do run our own first-party product analytics: a short list of app events (such as first open, onboarding, sign-up steps, paywall and purchase steps) sent to our own servers with a random anonymous identifier stored on your device, the platform, app version and an approximate country. This is described in full in the Privacy Policy. No advertising profile is built and nothing is shared with an analytics vendor.

The other usage measurement we run is first-party and server-side: when someone views a published portfolio page or scans a portfolio QR code, we record the event with a non-reversible visitor hash so tradespeople can see rough view counts. No cookie is set on the visitor's device for this, and no advertising profile is built. See the Privacy Policy for details.

Address fields in the app use the Google Maps Platform Places API. Google may set or read its own cookies and receives your IP address and device information when suggestions are requested. This happens only while you are typing in an address field. Google's use of that data is governed by the Google Privacy Policy.

You can clear cookies and browser storage at any time from your browser settings, or block them entirely. Blocking essential or authentication cookies will sign you out and prevent TradersFlow from working correctly. Subscription purchases are made through the Google Play Store and are governed by Google's own cookie and privacy practices.

We may update this policy when we add or change a cookie. Material changes are dated at the top of this page and, where the change affects you, announced by email or in-app notice.

TradersFlow is operated by AE TECHNOLOGIES GROUP LTD, a company registered in England and Wales under company number 17419062, with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Questions about this policy? Email privacy@tradersflow.co.uk.