Cookies & similar technologies

Cookies are small data files saved by your browser. We also use localStorage and sessionStorage — the same idea, stored on your device. In this policy we use the word "cookies" to cover all of these technologies.

Strictly to operate the service: keeping your session active, remembering your "Remember me" choice, protecting your account from abuse, processing payments securely through Stripe, and measuring overall site usage in an anonymous way.

These are required for TradersFlow to function. They cannot be turned off without breaking core features.

• Session token (browser storage) — keeps you signed in across pages.
• "Remember me" flag — remembers whether you ticked the box at sign-in.
• Preferences — small flags like theme and last-used view, stored locally.
• CSRF / request integrity tokens — short-lived values that protect form submissions.

Set by our authentication provider (Supabase) to manage your sign-in session, refresh expired access tokens, and link sign-ins from Google or Apple back to your TradersFlow account. These are essential — without them you cannot stay signed in.

Set by Cloudflare in front of our application to detect abusive traffic, block bots, and protect against denial-of-service attacks. These cookies do not identify you personally; they identify suspicious request patterns.

When you start a subscription or pay an invoice, you are redirected to a Stripe-hosted checkout or payment page. Stripe sets its own cookies on that page to process the payment securely and to detect fraud. These cookies are set by Stripe under their own privacy policy and are essential to taking a payment. TradersFlow does not see your card details.

We use Plausible Analytics, which is cookie-free and does not use device fingerprinting. It records aggregated, anonymous page views and event counts to help us understand what's working. No personal identifiers, no cross-site tracking, no advertising profiles.

You can clear cookies and browser storage at any time from your browser settings, or block them entirely. Blocking essential or authentication cookies will sign you out and prevent TradersFlow from working correctly. Blocking payment cookies on Stripe's pages will prevent payments from completing.

We may update this policy when we add or change a cookie. Material changes are dated at the top of this page and, where the change affects you, announced by email or in-app notice.

Questions about this policy? Email privacy@tradersflow.co.uk.