Cookie Policy

1. Only what the site needs to work

Thinflow uses only cookies and browser storage that are strictly necessary for the site to work. We do not use advertising, analytics or social-media tracking cookies, so there is nothing to opt in to. If that ever changes, we will ask for your consent first.

2. What we store

• sb-…-auth-token (cookie): keeps you signed in. Set by our sign-in provider, Supabase. Lasts until you sign out or the session expires.
• NEXT_LOCALE (cookie): remembers the language you chose. 1 year.
• fb_oauth_state (cookie): protects the Facebook connection step against forgery. 10 minutes.
• fb_pages (cookie): holds the list of pages you can connect, during the Facebook connection step only. 5 minutes.
• thinflow_cookie_notice (browser storage): remembers that you closed the cookie notice.
• Workspace and interface preferences (browser storage): the workspace you last opened and similar display settings.

3. Third parties

When you choose to connect WhatsApp, the page loads Facebook's sign-in tool, which may set Facebook's own cookies under Meta's cookie policy. It is not loaded anywhere else. Our error monitoring (Sentry) does not set cookies.

4. Managing cookies

You can delete or block cookies in your browser settings. If you block the necessary cookies, you will not be able to sign in. Questions: hello@thinflow.co. Last updated: 25 October 2026.