Cookie Policy
Last updated
Cookies and browser storage (local and session storage) are small pieces of data a website keeps in your browser. This page lists every one FlowyForm uses. Our Privacy Policy explains the rest of what we collect.
1. Essential: always on
These make sign-in and the app work. They are not used for tracking, and you cannot turn them off here (blocking them in your browser stops you signing in).
| Name | Type | Set by | Purpose | Lasts |
|---|---|---|---|---|
ff_session | Cookie | FlowyForm | Keeps you signed in. HttpOnly, so page scripts cannot read it. | 30 days after you last use FlowyForm, or until you sign out |
ff_admin_return | Cookie | FlowyForm | Only set for FlowyForm staff while they are signed in as a customer to give support. | Up to 25 hours |
ff:consent | Local storage | FlowyForm | Remembers your cookie choices on flowyform.com. | Until you clear it or change your choice |
ff:ws, ff:results-columns:* | Local storage | FlowyForm | Remembers the workspace you last opened and the result columns you chose. | Until you clear it |
2. On forms
When you fill in a FlowyForm form, it uses only the browser storage below, to work properly. Forms set no cookies of their own and never load analytics or advertising tags. If a form embeds a YouTube or Vimeo video, or uses a Google font, your browser fetches those from YouTube, Vimeo or Google, under their own policies.
| Name | Type | Set by | Purpose | Lasts |
|---|---|---|---|---|
ff:visitor | Local storage | FlowyForm | A random ID so a form counts one view per browser per day. Not linked to your name or answers. | Until you clear it |
ff:resp:* | Local storage | FlowyForm | Your unfinished answers, so a reload picks up where you left off. Only when the form owner turns on “save progress”. | Until you submit, or 7 days |
ff:done:* | Local storage | FlowyForm | How many times this browser has submitted the form, for forms that limit responses per device. | Until you clear it |
ff:access:* | Session storage | FlowyForm | Proof you entered the password of a protected form. | Until you close the tab |
3. Analytics and advertising: your choice
These run only on flowyform.com (the website and the app), never on forms or on customers’ own domains. They tell us which pages people use and whether our ads work.
| Name | Type | Set by | Purpose | Lasts |
|---|---|---|---|---|
_ga, _ga_* | Cookie | Google Analytics | Counts visits and shows which pages and sources people use. | Up to 2 years |
_gcl_au and Google ad cookies | Cookie | Google Ads | Measures whether our ads lead to sign-ups. | Up to 90 days (Google’s own cookies can last longer) |
- If your device’s time zone is in the EU, EEA, UK or Switzerland, these stay off until you accept them.
- Everywhere else they are on by default, and you can turn them off below at any time.
- If your browser sends a Global Privacy Control signal, the advertising tag stays off unless you turn it on.
4. Your choices
to change your choice. The same link is in the footer of every page. Turning analytics off also deletes the Google Analytics cookies on flowyform.com.
You can also block or delete cookies in your browser’s settings, and use Google’s Analytics opt-out add-on or your Google ad settings.