Cookie Policy

Cookies are small text files placed on your device when you visit a website. Websites also use similar technologies such as local storage (which keeps small preferences in your browser). We use both, and cover them together here.

• Strictly necessary / functional: remember your choices (e.g. light/dark theme, cookie consent). Set without consent.
• Analytics: help us understand aggregate usage on some pages. Non-essential.
• Advertising: set by Google AdSense on pages that show ads. Non-essential.

We do not operate a server that sets its own tracking cookies — attendflow.app is a static site hosted on Firebase Hosting. The items below are set either by your browser (local storage) or by Google's scripts.

3.1 Functional — local storage (first-party)

Stored by your browser, not sent to any server. Cannot be meaningfully switched off without breaking the feature.

Name	Type	Purpose	Duration
attendflow-theme	localStorage	Remembers your light/dark theme	Until cleared
attendflow-cookie-consent	localStorage	Remembers your cookie choices	6 months

3.2 Analytics — PostHog, Google Analytics / Firebase Analytics

PostHog (PostHog Inc., United States) is our product-analytics provider and runs on this site; requests are routed through a Cloudflare Worker proxy. Google/Firebase Analytics is set only on certain utility pages (e.g. account deletion, email verification, password reset). For EEA/UK visitors these are set only after you consent. These identifiers are pseudonymous and are treated as personal data — we do not use them to build advertising profiles.

Name	Purpose	Duration
ph_<key>_posthog	PostHog – pseudonymous visitor + session identifier	1 year
_ga	Google Analytics 4 – distinguishes unique users	2 years
_ga_<id>	Google Analytics 4 – session state	2 years

3.3 Advertising — Google AdSense

Set by Google on pages that display ads. For EEA/UK visitors who have not consented to personalized advertising, we request non-personalized ads.

Name	Set by	Purpose	Duration
__gads / __gpi	googlesyndication.com	Ad delivery, frequency capping, measurement	~13 months
IDE / test_cookie	doubleclick.net	Ad measurement / checks cookie support	Up to ~13 months

Google may set additional cookies; see Google's documentation for the current list.

• PostHog (US): product analytics on this site, proxied via Cloudflare.
• Cloudflare: operates the analytics proxy for the above.
• Google Analytics / Firebase: analytics and, on utility pages, authentication for account actions.
• Google AdSense: advertising on the free site.
• Google Fonts: our pages load the Inter font from Google's servers. This does not set a cookie, but your IP address is transmitted to Google to deliver the font.

For more information see Google's Privacy Policy. You can review ad settings at adssettings.google.com.

For information about data collection in our mobile app, see our Privacy Policy.

6.1 Consent (EEA/UK)

If you visit from the EEA or UK, non-essential (analytics and advertising) cookies are set only after you accept them in our cookie banner. You can change or withdraw your choice at any time using the “Cookie settings” link in the site footer, or by clearing the attendflow-cookie-consent item and reloading. Withdrawing consent does not affect processing that already took place.

6.2 Browser Settings

Most browsers let you control cookies through settings. You can block all cookies, block third-party cookies, delete existing cookies, or set the browser to notify you when cookies are being set.

6.3 Browser-Specific Instructions

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Privacy, search, and services → Cookies and site permissions

6.4 Opt-Out Tools

• Google Analytics: Google Analytics Opt-out Browser Add-on
• NAI Opt-Out: Network Advertising Initiative

Some browsers include a "Do Not Track" (DNT) feature. Because there is no agreed standard for how DNT signals should be interpreted, we do not respond to DNT signals. However, where required by law, we honor the Global Privacy Control (GPC) opt-out preference signal.

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you by posting the updated policy and updating the "Last Updated" date.