Cookie Policy
Effective date: July 1, 2026 · Stemflow, Inc.
Stemflow uses a small number of cookies that are strictly necessary to operate the platform. We do not use advertising cookies, tracking cookies, or third-party analytics cookies that identify individual visitors.
1. What are cookies?
Cookies are small text files stored in your browser by websites you visit. They are widely used to make websites work, remember your preferences, and provide website owners with information about how their site is used.
2. Cookies we use
We use only the following essential cookies. None of these are used for advertising or cross-site tracking.
| Cookie name | Purpose | Duration | Type |
|---|
primitive_session | Encrypted authentication session. Identifies you as a logged-in user and stores your current organization context. Without it, you would need to log in on every page. | Session / 7 days | Essential |
primitive_csrf | CSRF (cross-site request forgery) protection token. Sent with every mutating request (POST / PUT / DELETE) to verify the request originated from Stemflow and not a malicious third-party site. | Session | Essential |
cs_* | Campaign visitor session cookie. Set on public campaign pages (not the admin app) to track a visitor's progress through a multi-step campaign flow. One cookie per campaign, named with the campaign's unique ID. Contains only an anonymous visitor token. | 30 days | Essential |
3. Analytics
Stemflow uses Vercel Analytics to understand aggregate traffic patterns. Vercel Analytics is cookieless — it does not set any cookies, does not fingerprint individual browsers, and does not track visitors across sites. No personal data leaves your browser through Vercel Analytics.
We do not use Google Analytics, Meta Pixel, or any other third-party analytics service that tracks individual users.
4. No consent banner
Because we only set strictly necessary cookies and use cookieless analytics, we do not display a consent banner. Essential cookies cannot be disabled without breaking core functionality (authentication, security, campaign flow tracking).
5. Managing cookies
You can clear cookies at any time through your browser settings. Clearing the session cookie will log you out. Most browsers also allow you to block all cookies, but doing so will prevent Stemflow from functioning correctly.
For instructions on managing cookies in your browser, visit your browser's help pages:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy
- Edge: Settings → Cookies and site permissions
6. Changes to this policy
We may update this Cookie Policy to reflect changes in the cookies we use. Material changes will be communicated via the app or by email.