Cookie Notice
HKFlows uses only strictly necessary cookies and no analytics, advertising or tracking.
Effective October 12, 2026
1. In short
HKFlows sets only the cookies and browser-storage entries it needs to sign you in and to remember your choices. We do not use analytics, advertising or tracking cookies or scripts, so there is nothing to accept or decline. A small information bar tells you this once; closing it is remembered on your device. Strictly necessary cookies and storage do not require consent.
2. What is stored on your device
| Name | Purpose | Duration |
|---|---|---|
| hkf.session_token (prefixed __Secure- on HTTPS) | Keeps you signed in. HTTP-only. | Up to 30 days |
| hkf.two_factor (prefixed __Secure- on HTTPS) | Completes two-factor sign-in, only for accounts using two-factor authentication. HTTP-only. | A few minutes |
| hkf_locale | Remembers the language you chose | 1 year |
| hkflows-theme (browser storage, not a cookie) | Remembers a light or dark theme you picked | Until you clear it |
| hkflows-cookie-notice (browser storage) | Remembers that you closed the information bar | Until you clear it |
| hkflows.workspaceId (browser storage) | Remembers the workspace you used last | Until you clear it |
| hkflows.assistant.confirmed (browser storage) | Remembers which assistant action cards you already confirmed on this device (only the IDs of the plan or batch they created) | Until you clear it |
| hkflows.layouts.license (browser storage) | Remembers that you read the layout-sharing notice | Until you clear it |
| hkflows.checkout.before (session storage) | Your plan before checkout, to recognize the change when you return from the payment page | Until you close the tab |
| hkflows.layouts.sample.<workspace> (session storage) | The sample listing you picked in the layout editor (ID, title, image link) | Until you close the tab |
| hkflows.impersonation (session storage) | Staff support sessions only; never set for regular users | Until you close the tab |
3. Checkout
When you buy a plan, the checkout is shown by our payment provider Paddle, which may set its own cookies for security and fraud prevention. They are governed by Paddle’s privacy policy and are only set when you open the checkout.
4. Changes
If we ever add analytics or other non-essential cookies, we will ask for your consent first (this information bar alone would not be enough) and update this notice. See also our Privacy Policy. Questions: [email protected].