Cookies & similar technologies

Cookies are small data files saved by your browser. We also use localStorage and sessionStorage — the same idea, stored on your device. In this policy we use the word "cookies" to cover all of these technologies.

Strictly to operate the service: keeping your session active, remembering your "Remember me" choice, protecting your account from abuse, and — only if you agree — measuring overall app usage. When you first open TradersFlow we ask you to Accept or Reject optional analytics storage; rejecting it costs you nothing and the app works exactly the same. Subscription payments are handled inside the Google Play Store and are not part of TradersFlow's own cookies.

These are required for TradersFlow to function. They cannot be turned off without breaking core features.

• Session token (browser storage) — keeps you signed in across pages.
• "Remember me" flag — remembers whether you ticked the box at sign-in.
• Preferences — small flags like light/dark theme, language, appearance and last-used view, stored locally.
• App helper flags — for example whether you dismissed a tip, finished or replayed the walkthrough, your last-used stock location and onboarding choices, stored locally so the app does not ask again. They are not used for analytics or advertising.
• Subscription status — a cached copy of your plan status, so the app stays usable while your subscription is re-checked, and (in the Android app) an identifier used by our subscription provider, RevenueCat, to link Google Play purchases to your account. Stored locally; not used for analytics or advertising.
• CSRF / request integrity tokens — short-lived values that protect form submissions.

Set by our managed authentication provider to maintain your sign-in session and refresh expired access tokens. Google sign-in on the web may be brokered through Lovable before the session is established with our authentication provider. These technologies are essential — without them you cannot stay signed in.

Our hosting and edge providers may set strictly necessary security technologies to detect abusive traffic, enforce rate limits and protect the Service. Their exact names and duration can change with the managed hosting configuration; they are not used by TradersFlow for advertising.

On the website and web app we do not use a third-party analytics product, advertising cookies or cross-site trackers.

This storage is optional and off until you accept it. Until you choose "Accept" on the consent banner, no analytics identifier is created and no analytics event is sent. If you choose "Reject", the anonymous identifier, session identifier and any campaign attribution values are cleared from your device and nothing further is recorded. You can change your mind at any time from the privacy choices switch in Settings, or by clearing the site/app storage, which brings the banner back.

What it stores on your device when accepted: a random anonymous identifier, a per-launch session identifier, and — if you arrived through a campaign link — the campaign, source and medium recorded on first visit. Your consent choice itself is stored as a small necessary flag so we do not ask again on every visit.

We do run our own first-party product analytics: a short list of app events (such as first open, onboarding, sign-up steps, paywall and purchase steps) sent to our own servers with a random anonymous identifier stored on your device, the platform, app version and an approximate country. This is described in full in the Privacy Policy. No advertising profile is built and these first-party events are not shared with an analytics vendor.

Android app only — Google Firebase Analytics. The TradersFlow Android app also includes Google Analytics for Firebase. It uses app storage (a Firebase app-instance identifier), not browser cookies, is disabled when the app is installed, and is switched on only if you choose "Accept" on the same consent banner. Choosing "Reject" keeps it off. What Google receives, and why, is set out in the Privacy Policy.

The other usage measurement we run is first-party and server-side: when someone views a published portfolio page or scans a portfolio QR code, we record the event with a non-reversible visitor hash, calculated on our server and rotated daily, so tradespeople can see rough view counts. Nothing is stored on the visitor's device for this — no cookie and no browser-storage identifier — and no advertising profile is built. See the Privacy Policy for details.

The fonts used across TradersFlow are served from our own domain. We do not load them from Google Fonts or any other third-party font service, so no request is made to a font provider and no font-related cookie or IP disclosure occurs.

Application resources are delivered through our managed hosting and edge infrastructure, which may use the strictly necessary security technologies described above.

Address fields in the app use the Google Maps Platform Places API. Google may set or read its own cookies and receives your IP address and device information when suggestions are requested. This happens only while you are typing in an address field. Google's use of that data is governed by the Google Privacy Policy.

Optional analytics storage: use the Accept / Reject choice shown on your first visit, or change it later with the privacy choices switch in Settings. Rejecting keeps every feature working. Clearing the site or app storage resets the choice and the banner is shown again.

You can clear cookies and browser storage at any time from your browser settings, or block them entirely. Blocking essential or authentication cookies will sign you out and prevent TradersFlow from working correctly. Subscription purchases are made through the Google Play Store and are governed by Google's own cookie and privacy practices.

This policy is provided in English, and the English version is the authoritative version.

We may update this policy when we add or change a cookie. Material changes are dated at the top of this page and, where the change affects you, announced by email or in-app notice.

TradersFlow is operated by AE TECHNOLOGIES GROUP LTD, a company registered in England and Wales under company number 17419062, with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Questions about this policy? Email privacy@tradersflow.co.uk.