This Cookie Policy explains how Flosona uses cookies and similar technologies on our website and web application. It works alongside our Privacy Policy. The cookie notice appears on marketing pages (the homepage, blog, solutions, and legal pages), not in the signed-in dashboard.
1. What is a cookie?
A cookie is a small text file a website saves to your browser. When you come back, the browser sends it to the site so it can recognise you, keep you signed in, or remember a preference. Some cookies are needed for the site to work at all. Others are optional. A cookie can be set by the site you are visiting, or by another service the site uses.
2. Cookies Flosona uses
We use cookies that are necessary for the service to work. We also use optional cookies, and they are set only if you choose Accept all in the cookie notice: cookies for support chat, Google Analytics cookies, Meta advertising cookies, and a referral cookie. The table below lists every cookie and stored preference we set.
We also count visits to these pages with our own visit statistics. They use no cookies and store nothing on your device, so they are not in the table and need no consent. Our Privacy Policy describes what they record.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| accessToken | Keeps you signed in to your Flosona account between page loads. | Strictly necessary | 7 days |
| refreshToken | Lets your session renew without asking you to sign in again. Renewed on each visit. | Strictly necessary | 90 days |
| flosona-cookie-consent | Stored in browser local storage, not a cookie in the technical sense. Records whether optional support chat may load: true if you allowed it, dismissed if you did not. | Preference | Until cleared |
| flosona-ad-consent | Stored in browser local storage. Records whether you chose Accept all or Reject optional in the cookie notice, which covers analytics and advertising cookies, and which version of this policy you answered, so we ask you again if what you are agreeing to changes. | Preference | Until cleared |
| _ga | Set by Google Analytics, only if you choose Accept all. Distinguishes one browser from another so we can count visits to our marketing pages. | Analytics | 2 years |
| _ga_* | Set by Google Analytics, only if you choose Accept all. Keeps track of the current visit, so pages viewed together count as one visit. | Analytics | 2 years |
| _fbp | Set by the Meta pixel, only if you accept advertising cookies. Identifies your browser to Meta so we can measure visits and sign ups that follow our ads, and show Flosona ads to people who have visited our site. | Advertising | 90 days |
| _fbc | Set by the Meta pixel, only if you accept advertising cookies, when you arrive by clicking one of our ads on Facebook or Instagram. Records that click so the visit can be credited to the ad. | Advertising | 90 days |
| flo_ref | Set only if you accept advertising cookies, when you arrive through a Flosona referral link. Holds the code from that link and nothing else, so that if you create an account the person or partner who introduced you is credited. If you do not accept, the code is kept only until you leave the site, and is still used if you sign up before then. | Advertising | 90 days |
3. Third party services
When you use certain features, third party services may set their own cookies on pages under their control. Those cookies are set on the third party's domain, not on Flosona's site. Specifically:
- Stripe. When you pay an invoice, Stripe's hosted payment fields set cookies that are required to process the transaction and to detect fraud. See the Stripe cookie settings.
- Video conferencing providers (Zoom, Google Meet, Microsoft Teams, Jitsi). If you join a call from a Flosona appointment, the provider may set cookies as part of its own session. Those apply only on the provider's domain.
- Flosona Support (Chatwoot). Opening the support widget may store a conversation identifier and related session data in your browser so the same support conversation can continue across pages. The widget loads only after you accept the site consent notice. Signed-in support identity is reset when you sign out. The support service is hosted for Flosona and is not used for advertising.
- Google Analytics. Only if you choose Accept all, our marketing pages, the thank-you page after our contact form, our sign up page, and the account setup steps straight after signing up load Google Analytics. It sends Google the address of the page you visited without anything after a question mark, the site you came from without its page address, your browser and device details, and your IP address, and sets the Google Analytics cookies above. We use it to count visits and see which pages people read. Google signals and ad personalisation are turned off. It never runs inside the Flosona app once your account is set up, on pages that belong to our customers' own customers such as booking pages, or on any other page while you are signed in. Google's use of this information is covered by How Google uses information from sites that use its services.
- Meta (Facebook and Instagram advertising). Only if you accept advertising cookies, our marketing pages, the thank-you page after our contact form, our sign up page, and the account setup steps straight after signing up load the Meta pixel. It sends Meta the page you visited, your browser and device details, your IP address, the Meta cookies above, and, if you create an account or send us a message from our contact page, the fact that you did and, for a message, its topic (such as sales or support). It does not send your name, your email address, or what you wrote. We use it to measure and improve our advertising and to show Flosona ads to people who have visited our site. It never runs inside the Flosona app once your account is set up, on pages that belong to our customers' own customers such as booking pages, or on any other page while you are signed in. Meta's use of this information is covered by the Meta Privacy Policy.
These third party cookies are governed by the privacy policies of their providers, not by Flosona.
4. What we do not do
- We do not sell your personal data.
- We do not load analytics or advertising cookies unless you choose Accept all, and you can withdraw that choice at any time.
- We do not send Google or Meta your name, your email address, or anything from inside your Flosona account.
- We do not add social media share widgets that load third party trackers on our pages.
5. Managing your cookies
Necessary cookies keep Flosona working, so blocking them will break things like staying signed in. Optional cookies are entirely your choice:
- Sign out. Ending your Flosona session clears the sign in tokens straight away.
- Browser settings. Most browsers let you view, clear, or block cookies per site. Look for “Privacy and Security” or “Site Settings” in your browser preferences.
- Cookie settings. Change or withdraw your choice at any time. Reject optional turns off support chat, analytics and advertising cookies straight away; closing the notice with the X does the same.
- Private browsing. All cookies are discarded when you close the private window.
6. Changes to this policy
We will update this Cookie Policy if we start using new cookies or change the purpose of existing ones. The “Last Updated” date at the top of the page shows when it was last revised.
7. Contact
Questions about cookies can be sent to privacy@flosona.com. See also our Privacy Policy, GDPR / Data Rights, and Security pages.