Cookies & Storage Policy

Last updated: 25 September 2026

1. What Are Cookies & Local Storage Cookies are small text files stored on your device by websites. Local Storage (localStorage) is a browser feature that allows websites to store data locally without expiration.

2. What We Use Our websites use strictly necessary local storage at all times, plus optional analytics and advertising cookies that load only after you accept them in our cookie banner (see §4 and §4a).

Landing Page (flick-soft.tech / crm.flick-soft.tech): • flick-ai-locale — Type: localStorage — Purpose: Saves your language preference (en/pt/es/ru) — Duration: Permanent (until cleared) — Tracking: None • flick-cookie-consent — Type: localStorage — Purpose: Remembers your choice in the cookie banner (accepted or rejected) — Duration: Permanent (until cleared) — Tracking: None • flick_attribution_v1 — Type: sessionStorage; moved to localStorage only after you accept cookies — Purpose: Remembers how you first arrived (campaign parameters such as utm_source, the referring page and the landing page) so that a request you send through our form is attributed to the right campaign — Duration: until you close the tab (sessionStorage) or until cleared (localStorage) — Tracking: sent to us only together with a form you submit • flick_es_lead, flick_es_lead_tracked — Type: sessionStorage — Purpose: after you send the demo form on /es, keep your name and email to pre-fill the booking calendar and prevent counting the same request twice — Duration: until you close the tab — Tracking: None

CRM Platform (crm.flick-soft.tech/dashboard): • token — Type: localStorage — Purpose: JWT authentication token for secure login — Duration: Until logout or token expiry — Tracking: None • flick_locale — Type: localStorage — Purpose: Saves your language preference (en/pt/ru) — Duration: Permanent (until cleared) — Tracking: None • sidebar_collapsed — Type: localStorage — Purpose: Remembers sidebar collapsed/expanded state — Duration: Permanent (until cleared) — Tracking: None

None of the above data is transmitted to our servers for tracking purposes or shared with third parties.

3. Third-Party Resources We load fonts from Google Fonts (fonts.googleapis.com). When your browser downloads font files, your IP address is transmitted to Google. Google's privacy policy applies: policies.google.com/privacy. No cookies are set by Google Fonts since January 2022.

4. Analytics Cookies (consent-based) With your consent, we use Google Analytics 4 (provided by Google LLC) to understand aggregated website traffic. These cookies (`_ga`, `_ga_*`) are set only after you click "Accept" in our cookie banner; they store a randomly generated identifier and expire after up to 2 years. Google may process this data, including transfer to the United States under Standard Contractual Clauses (GDPR Art. 46); IP addresses are anonymized.

4a. Advertising Cookies — Meta Pixel (consent-based) With the same consent, we load the Meta Pixel (Meta Platforms Ireland Ltd.) to measure visits and contact-form submissions that come from our ads on Facebook and Instagram, and to show our ads to people who visited this site. It sets the `_fbp` cookie (up to 90 days) and, if you are logged in to Facebook, may use Meta's own `fr` cookie. Meta may process this data, including transfer to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. Meta's policy: facebook.com/privacy/policy. If you click "Reject", the Meta Pixel is not loaded.

5. Cookie Consent Because analytics and advertising cookies are not strictly necessary, they require your prior opt-in consent under the ePrivacy Directive (2002/58/EC) and GDPR. On your first visit a banner lets you Accept or Reject; analytics is disabled by default (Google Consent Mode v2) and loads only if you accept; the Meta Pixel likewise loads only if you accept. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. Strictly necessary storage (language preference, authentication, UI state) does not require consent and is always active.

6. Your Control Most browsers allow you to: view and delete localStorage data, block cookies entirely, set preferences for specific websites. Clearing localStorage will reset your language preference and log you out of the CRM platform.

7. Mobile App Storage (iOS) The Flick AI CRM iOS app does NOT use cookies or localStorage (these are web-only concepts). Instead it uses standard iOS storage mechanisms: • iOS Keychain (encrypted, hardware-backed) — stores: JWT authentication token, optionally saved email for auto-fill. Managed via `expo-secure-store`. • UserDefaults (app sandbox, not encrypted) — stores: language preference, push notifications on/off toggle, Face ID / Touch ID unlock toggle, last-synced user profile summary for offline display. • Image cache — images you have opened in chats are cached by the OS to reduce re-downloads; cleared automatically by iOS when storage is low, or manually via Settings → General → iPhone Storage → Flick AI CRM → Offload App. No third-party analytics, advertising, or tracking SDKs are present in the iOS app. No IDFA (advertising identifier) is accessed.

8. Contact For questions about our cookie and storage practices: hello@flick-soft.tech