Cookie Policy
Last updated: 30 September 2026
This Cookie Policy explains how Flumin (“we”, “us”) uses cookies and similar technologies on the marketing website, the Flumin app (including each organisation’s client portal), and the admin app. It should be read with our Privacy Policy.
1. What are cookies and similar technologies?
Cookies are small text files stored on your device. We also use local storage, which stays in the browser but is not sent as a cookie. This policy lists the cookies we actually set, and the local storage entries we use for sign-in and preferences.
Vercel Web Analytics and Vercel Speed Insights measure page views and loading performance. They do not set cookies and they do not track you across other websites. They load on our sites without an analytics opt-in.
2. Cookies we set
These are the HTTP cookies Flumin sets. We do not set an analytics cookie for Vercel.
| Name | Provider | Category | Purpose | How long |
|---|---|---|---|---|
ui-resolved-theme |
Flumin | Preferences | Marketing site. Stores whether the resolved theme is light or dark so the favicon matches. | 1 year |
sidebar_state |
Flumin | Preferences | Admin app. Stores whether the sidebar is expanded. Written when you toggle the sidebar. | 7 days |
_GRECAPTCHA |
Strictly necessary | Set when a waitlist or signup form loads reCAPTCHA v3 so we can reject bots. Those forms do not submit without it. | Set by Google (typically about 6 months) | |
__stripe_mid |
Stripe | Strictly necessary | Set when you open card checkout in the app, for fraud prevention. | About 1 year |
__stripe_sid |
Stripe | Strictly necessary | Set when you open card checkout in the app, for fraud prevention during that visit. | About 30 minutes |
Sign-in does not use a session cookie. The app, client portal, and admin app keep the Supabase session in local storage (see below).
3. Local storage (not cookies)
| Name | Where | Purpose |
|---|---|---|
sb-<project-ref>-auth-token |
App, client portal, admin | Authentication session (keeps you signed in). |
next-ui-theme |
Marketing site | Your theme choice: light, dark, or system. |
org-app-ui-theme |
App and client portal | Your theme choice: light, dark, or system. |
admin-app-ui-theme |
Admin app | Your theme choice: light, dark, or system. |
org-app-sidebar-collapsed |
App and client portal | Whether the sidebar is collapsed. |
flumin_cookie_consent_v1 |
Marketing site and app | Records that you dismissed the cookie notice, and whether you allowed Google Tag Manager when that tag is offered. |
After you sign in we may also store setup-progress flags in local storage. Those are not cookies.
4. Optional analytics cookies
We do not load Google Analytics, the Meta pixel, Hotjar, PostHog, or similar visitor-tracking
scripts by default. The marketing site can load Google Tag Manager. That script
loads only after you accept analytics cookies, and only when a container id is
configured. If it is not configured, it is not loaded and it sets no cookies. If it is configured
and you accept, Google may set its own cookies (for example _ga).
Vercel Web Analytics and Speed Insights are not part of that choice. They do not use cookies.
5. Your choices
When Google Tag Manager is not configured, the cookie banner describes the cookies and storage above. It does not ask you to accept analytics cookies, because we are not setting any.
When Google Tag Manager is configured, the banner lets you:
- Accept all — allow Tag Manager to load.
- Reject non-essential — keep Tag Manager off.
- Cookie settings — change that choice later from the footer.
You can also block or delete cookies in your browser. Blocking strictly necessary cookies can stop checkout or the bot check on signup and waitlist forms.
6. Organisation websites and client portals
The client portal is part of the Flumin app, not a separate site. It uses the same sign-in storage and the same cookieless Vercel measurement as the rest of the app. If you are a client of a practice using Flumin, that organisation may publish its own privacy and cookie notices as well.
7. Changes
We may update this Cookie Policy from time to time. The “Last updated” date at the top will change when we do.
8. Contact
Questions about this Cookie Policy: hello@flumin.co.