COOKIES AND TRACKING POLICY

<script id="cky-cookie-policy" type="text/javascript" src="https://cdn-cookieyes.com/client_data/d5b119468f48c13f083b0c3f59232ce3/cookie-policy/script.js"></script>

1. Technical Cookie Declarations

To maintain secure, multi-tenant B2B dashboard sessions and to ensure that our web chatbots run smoothly, we use cookies and HTML local storage. We split our cookies into three core categories:

A. Strictly Necessary SaaS Dashboard Cookies

These cookies are required to authenticate your identity, prevent security exploits, and manage your billing profiles. If blocked, app.styleflo.ai will fail to load.

sb-access-token (Supabase): Secure JSON Web Token (JWT) used to authenticate your active session against our backend APIs. (Session / 1 Hour)
sb-refresh-token (Supabase): Secure token used to silently renew your active session without forcing a manual login. (Persistent / 30 Days)
__stripe_mid & __stripe_sid (Stripe): Fraud detection, device profiling, and secure card transaction handling during checkout. (Persistent / 1 Year)
wphb-cache-control (WPMU DEV): Caches your dashboard styling preferences and layout templates to speed up page loads. (Session)

B. Essential Web Widget Cookies

These cookies are loaded within the embeddable website widget script (widget.js) to provide persistent customer conversations:

styleflo_chat_session_id (StyleFlo): Essential utility token that tracks a customer's active chat thread across browser tabs or page refreshes. (Session / 1 Day)
cf.turnstile.u (Cloudflare): Secure, invisible token used to run human-vs-bot verification to prevent spam attacks on your chatbot widgets. (Persistent)

C. Optional Marketing & Analytics Pixels

If enabled by the business owner on their custom dynamic landing pages (styleflo.ai/[slug]), we load standard tracking pixels to measure advertising performance:

Google Analytics 4 (GA4): Collects anonymous metrics on visitor traffic, devices, and approximate locations.
Meta (Facebook) Pixel: Tracks conversion events to optimize social media advertising campaigns.

2. Managing Cookie Preferences

Dashboard Preferences: Because StyleFlo's dashboard cookies are strictly essential for platform security and tenant data isolation, they cannot be turned off.
End-Consumer Consent: For custom landing pages, we provide a clean, GDPR-compliant cookie consent banner. Visitors can select their preferences or opt-out of optional marketing and analytics cookies at any time.