Cookie Policy
Last updated: 24 April 2026
This Cookie Policy explains how CaseFlo Limited (Company No. 17181579, registered in England and Wales) ("CaseFlo", "we", "us") uses cookies and similar technologies when you visit caseflo.co.uk or use the CaseFlo platform. This policy should be read alongside our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They help websites work correctly, remember your preferences, and collect analytics data. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (stored until they expire or you delete them).
2. Our approach
We aim to use as few cookies as possible. We do not use advertising cookies, tracking pixels, or third-party marketing scripts. We use cookies only where necessary for the platform to function or to understand how it is being used in aggregate.
3. Cookies we use
Strictly necessary cookies
These cookies are essential for the platform to work. You cannot opt out of these.
| Name | Purpose | Duration |
|---|---|---|
| sb-access-token | Supabase authentication session token | Session |
| sb-refresh-token | Supabase session refresh token | 1 year |
| __cf_bm | Cloudflare bot management (protects the platform from automated attacks) | 30 minutes |
Functional cookies
These cookies enhance your experience. They are set when you use specific features.
| Name | Purpose | Duration |
|---|---|---|
| cf-sidebar-collapsed | Remembers whether you have collapsed the navigation sidebar | 1 year |
| cf-last-section | Remembers the last assessment section you were working on | Session |
Analytics cookies
We do not currently use any analytics cookies. We do not use Google Analytics or any similar third-party tracking service. We may collect anonymised, aggregated usage data using privacy-preserving tools in the future; if we do, we will update this policy and seek your consent.
What we do NOT use
- Advertising or retargeting cookies
- Social media tracking pixels (Facebook, LinkedIn, Twitter)
- Cross-site tracking technologies
- Fingerprinting or device identification
4. Third-party services
Some third-party services we use may set their own cookies. We have minimal control over these.
| Service | Purpose | More info |
|---|---|---|
| Supabase | Authentication and database (sets session cookies) | supabase.com/privacy |
| Vercel | Web hosting infrastructure (may set performance cookies) | vercel.com/legal/privacy-policy |
| Sentry | Error monitoring (may set a session identifier) | sentry.io/privacy |
5. How to control cookies
You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning.
Browser opt-out links:
- Chrome: chrome://settings/cookies
- Firefox: about:preferences#privacy
- Safari: Preferences → Privacy
- Edge: edge://settings/privacy
You can also use browser extensions such as uBlock Origin or Privacy Badger to manage cookies.
6. Changes to this policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
7. Contact
For questions about our use of cookies, contact us at cheyenne@caseflo.co.uk.