Cookie Policy - TeamFlow

In short

TeamFlow only stores what it needs to work: your sign-in, the sign-in safety step, and the language and look you choose.
Cloudflare, which protects the site, may add its own security cookies.
No analytics, no advertising and no tracking across sites, which is why there is no cookie banner.

This summary is here to help. The full text below is what applies.

1What cookies are

Cookies are small text files a website asks your browser to keep and send back on later visits. Browser storage (localStorage) works in a similar way but stays in your browser and is never sent to the server. The law treats both the same: storing or reading anything on your device needs your consent unless it is strictly necessary for a service you asked for.

2Cookies we set

Name	Purpose	Lifetime
TeamFlow_session	Keeps you signed in. It holds a random identifier, can only be read by our server (HttpOnly) and is never sent to other sites (SameSite=Strict).	30 days with Keep me logged in; otherwise until you close the browser (the session itself ends after 12 hours); or until you log out
TeamFlow_2fa	Remembers that you entered the right password while you finish two-factor sign-in.	5 minutes
appearance	Your choice of light, dark or system theme, so pages open in the right colours without flashing. Set only when you choose a theme or one is saved on your account.	1 year
tf_prefs	Your accent colour, background, corner style, motion and text size. Set only when you change them or they are saved on your account.	1 year
tf_locale	The language you chose, English or Romanian. Set only when you pick a language or one is saved on your account.	1 year
sidebar_state	Whether you collapsed the side menu. Set only when you open or close it.	7 days

3Browser storage

Key	Purpose	Lifetime
appearance	The same theme choice as the cookie, read before the page is drawn.	Until you clear your browser data
disclosure:<section>:<user>	Which groups of tasks, members, departments or statistics you expanded or collapsed, kept separately for each person using the browser.	Until you clear your browser data

Nothing in browser storage is sent to us or to anyone else.

4Cloudflare security cookies

TeamFlow is delivered through Cloudflare, which protects it from bots and attacks. Cloudflare may set these cookies on our domain:

Name	Purpose	Lifetime
__cf_bm	Tells real visitors apart from automated traffic.	30 minutes
cf_clearance	Remembers that your browser passed a security check, so you are not asked again on every page.	Set by Cloudflare, usually from 30 minutes to a few hours

On the sign-up form, Cloudflare Turnstile checks that you are a person. It runs in a frame from challenges.cloudflare.com and may use its own storage there. Cloudflare describes this in its cookie policy and Turnstile privacy addendum.

5Why there is no cookie banner

Article 5(3) of the EU ePrivacy Directive, which Romania applies through Law 506/2004, allows a site to store information on your device without asking first when it is strictly necessary to provide a service you explicitly asked for. Signing in, the two-factor step and security checks against bots are strictly necessary. The language, theme, preference and layout items only store choices you made yourself, which European regulators accept as user-interface customisation.

TeamFlow has no analytics, advertising, social media or other non-essential cookies, so there is nothing to consent to. If we ever add any, we will ask for your consent first and update this page.

6Your choices

You can see and delete cookies and site data in your browser settings at any time. If you block or delete TeamFlow_session you will be signed out, and without it you cannot sign in. Deleting the appearance and preference items only resets the look of the app on that device. Signing out removes the session cookie.

7Contact

Questions about cookies: help@teamflow-ftc.com. More about how we handle personal data is in the Privacy Policy.