Legal
Cookie Policy
Last updated 28 July 2026
CanvasFlow does not have a cookie banner, because it does not have the kind of cookies that need one. There is no advertising network here, no analytics vendor, and nothing following you to other websites. This page lists everything the site stores in your browser.
What is stored
| Name | Kind | What it does | How long it lasts |
|---|---|---|---|
| sb-*-auth-token | Cookie — strictly necessary | Keeps you signed in. Set by our authentication provider and split across a few cookies when the session is large. | Until you sign out, or one year |
| sb-*-auth-token-code-verifier | Cookie — strictly necessary | A one-time value that completes a sign-in securely. | Minutes, then discarded |
| theme | Local storage | Whether you chose the light or dark theme. | Until you clear it |
| cf:appearance | Local storage | Your interface preferences — density, grid, canvas options. | Until you clear it |
That is the complete list. If you find something else, it is either a bug or something a browser extension of yours put there.
Why there is no banner
The ePrivacy rules require consent for storage that is not strictly necessary for a service the user has asked for. Sign-in cookies are necessary by definition — without them you would be signed out on every page load — and the two local storage entries hold settings you chose yourself, on your own device, and never leave it.
Nothing here is used to identify you across sites or build an advertising profile, so there is nothing to ask permission for. If we ever add analytics, this page will change and a real consent prompt will appear before anything is set.
Third-party cookies
We do not set any. Two things are worth knowing about anyway:
- If you sign in with Google, Google sets its own cookies during that exchange, on its own domain, under its own privacy policy. We have no control over them and no access to them.
- If you subscribe, PayPal does the same on its checkout pages.
The browser extension
The extension does not use cookies. It keeps your session and your chosen board in the browser’s own extension storage, which no website can read. Signing out of the extension deletes both, and so does the “Clear local data” button on its options page.
Clearing them
Every browser lets you delete cookies and site data, usually under Privacy or History. Removing ours signs you out and resets your interface preferences to their defaults; nothing on your boards is affected, because none of it lives in your browser.
Questions about anything on this page: admin@northem.no.