Legal document
Cookie Policy
- Last updated
- 18 October 2026
- Issued by
- Profflow Analytics OÜ
- Registry
- 17552133
- VAT
- EE103006985
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit.
How we use cookies
Profflow uses essential cookies, and three first-party attribution cookies that remember which link or site brought you here — a partner's code or a campaign label, never an identifier, never shared with anyone else. We do not use advertising cookies, cross-site tracking cookies, or third-party marketing cookies.
Cookies we use
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
sb-auth-token | Keeps you logged in (Supabase auth) | Up to 30 days | Essential |
sb-refresh-token | Refreshes your login session | Up to 30 days | Essential |
preferences | Remembers your settings (theme, currency) | 1 year | Essential |
csrf_token | Prevents cross-site attacks | Session | Security |
pf_from_listing | Remembers that an install began in the Shopify App Store, so billing opens on Shopify rather than a card | 10 minutes | Essential |
pf_pending_shop | Carries the shop domain through the Shopify install redirect | Session | Essential |
pf_via | Remembers the partner whose link brought you, so they are credited if you subscribe | 60 days | Attribution |
pf_src | Remembers which link or site first brought you here: a channel and campaign label, never an identifier | 90 days | Attribution |
pf_src_saved | Notes that the label above has been saved with your account, so it is not sent again | 1 year | Attribution |
Analytics
We use Vercel Analytics to understand aggregate site usage. It is cookieless — it sets no cookies, stores no identifiers on your device, and does not track you across websites.
Cookies we do not use
- Advertising or retargeting cookies
- Social media tracking cookies
- Analytics cookies that track you across sites
- Third-party marketing cookies
Managing cookies
Disabling the essential cookies may prevent Profflow from working correctly; the attribution cookies can be deleted at any time without any effect on the product. You can manage cookies through your browser settings.
Changes to this policy
We may update this policy if we change how we use cookies. The date at the top shows when it was last updated.
Contact
Questions about cookies: support@profflow.co