Cookie Policy
Effective Date: March 18, 2026 · Last Updated: March 18, 2026
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website operators.
ElyteFlow uses cookies and similar tracking technologies on our website (elyteflow.com) and platform (app.elyteflow.com). This policy explains what we use, why we use them, and how you can control them.
2. Types of Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled. They include:
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Supabase authentication session | Session |
| sb-refresh-token | Supabase session refresh | 7 days |
| __stripe_mid | Stripe fraud prevention | 1 year |
| __stripe_sid | Stripe session identifier | 30 minutes |
| csrf_token | Cross-site request forgery protection | Session |
Without these cookies, the Platform cannot authenticate you or process payments securely.
2.2 Functional Cookies
These cookies remember your preferences and improve your experience:
| Cookie | Purpose | Duration |
|---|---|---|
| ef_billing_interval | Remembers monthly/yearly toggle on pricing page | 30 days |
| ef_theme | Stores UI theme preference | 1 year |
| ef_last_location | Remembers last selected location for multi-location users | 30 days |
2.3 Analytics Cookies
We use Vercel Analytics to understand how visitors use our website. This service collects anonymized, aggregated data and does not track individual users across sites.
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| Vercel Analytics | Anonymized page views and performance metrics | Session |
Vercel Analytics is privacy-friendly and does not use persistent cookies for tracking. No personally identifiable information is collected.
2.4 Third-Party Cookies
Some features on our Platform involve third-party services that may set their own cookies:
| Service | Purpose | Their Policy |
|---|---|---|
| Stripe | Payment processing and fraud prevention | stripe.com/privacy |
| Cal.com | Demo booking calendar embed | cal.com/privacy |
We do not control third-party cookies and recommend reviewing the respective privacy policies of these services.
3. What We Do Not Use
We want to be clear about what we do not do:
- We do not use advertising or tracking cookies
- We do not use cross-site tracking to follow you around the internet
- We do not sell data collected via cookies to third parties
- We do not use cookies to build advertising profiles
- ElyteFlow products are ad-free — we do not serve ads and do not allow advertisers to use our cookies
4. Cookie Consent
Website Visitors (elyteflow.com)
When you first visit elyteflow.com, you will be presented with a cookie consent banner. You can:
- Accept all cookies — enables all cookie categories described above
- Accept necessary only — enables only strictly necessary cookies
- Manage preferences — choose which categories to enable
Platform Users (app.elyteflow.com)
By creating an account and using the Platform, you consent to the use of strictly necessary and functional cookies required for the Platform to operate. These cannot be disabled without preventing the Platform from functioning.
Withdrawing Consent
You can change your cookie preferences at any time by clicking “Cookie Settings” in the footer of elyteflow.com. Note that disabling certain cookies may affect the functionality of the website.
5. Managing Cookies in Your Browser
In addition to our consent controls, you can manage cookies directly through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Note that blocking all cookies will prevent you from logging into the Platform and using its features.
6. Do Not Track
Some browsers offer a “Do Not Track” (DNT) signal. We respect DNT signals where technically feasible. Our analytics implementation (Vercel Analytics) is privacy-preserving by default and does not track individual users regardless of DNT status.
7. GDPR and EU Users
For users in the European Union, our use of non-essential cookies is based on your consent under Article 6(1)(a) of the GDPR. Strictly necessary cookies are processed under our legitimate interest in providing a functioning service (Article 6(1)(f)).
You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. To exercise your rights under GDPR, see our Privacy Policy or contact privacy@elyteflow.com.
8. Changes to This Policy
We may update this Cookie Policy as we add new features or as legal requirements change. We will notify you of significant changes by updating the “Last Updated” date at the top of this page and, where appropriate, via email or platform notification.