Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your browser or device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and maintain secure user sessions. In addition to cookies, FounderFlow may use standard HTML5 local storage to save your encrypted authorization tokens.

2. How We Use Cookies

We only use cookies and local storage where strictly necessary for operational functionality and platform security. We categorize our cookies as follows:

• Essential Session Storage: Your authentication is stored as an httpOnly session cookie (session_token), which is inaccessible to JavaScript and automatically sent with requests to the backend. This is the most secure way to maintain your login session. Cleared when you log out.
• OAuth Security Cookies: Used by Google Identity Services to securely handle OAuth login popups, prevent Cross-Site Request Forgery (CSRF), and maintain token refresh cycles.
• Preference Settings: Stores simple layout choices (like dark mode configurations or focus hour states) so they are preserved upon reload.

3. Managing and Deleting Cookies

You have complete control over cookies. You can adjust your browser settings to refuse some or all cookies, or to alert you when cookies are being sent.

• Please note that if you disable all essential cookies, the secure login flow will fail and you will not be able to access your dashboard.
• To completely reset all stored local data, simply click "Log Out" in your profile settings, which instantly purges all authorization tokens and local storage sessions.