1. What are cookies and similar technologies
A cookie is a small text file that a website places on your device when you visit it. Cookies are stored in your browser and sent back to the originating website on each subsequent visit. They allow the website to recognize your device, remember your preferences, and maintain session state.
Similar technologies include:
- Local storage and session storage. Browser-based storage mechanisms that allow websites to persist data on your device without using cookies. Unlike cookies, this data is not automatically sent to the server with each request.
- Pixel tags and web beacons. Tiny transparent images or scripts embedded in web pages or emails that signal to a server when content has been loaded or an email has been opened.
- Device fingerprinting. A technique used by some analytics and fraud-prevention providers that infers a device identifier from a combination of browser attributes, without relying on cookies.
This Cookie Policy explains how StorageFlo uses cookies and similar technologies on storageflo.io and in the booking widget and administrative dashboard (collectively, the "Properties"). It should be read alongside our Privacy Policy.
2. Why we use them
We use cookies and similar technologies for the following purposes:
Authentication and security. Cookies are essential for maintaining your authenticated session. Without a session cookie, you would need to log in on every page load. We also use a CSRF token cookie to protect against cross-site request forgery attacks, a common class of web security vulnerability.
Preference and functionality. Functional cookies allow the Properties to remember choices you have made, such as your light or dark mode preference, so that you do not need to set them again on each visit.
Analytics. We use anonymized analytics to understand how operators and tenants interact with the Properties. This helps us improve the product, identify usability issues, and make informed product decisions. Analytics cookies are not used to build advertising profiles or to track individuals across unrelated websites.
Fraud prevention on payment forms. When a payment form is displayed (for example, in the booking widget when a tenant is completing a booking with a payment step), the payment processor may set cookies to detect fraudulent activity. These cookies are operated by the payment processor, not by StorageFlo, and are subject to that processor's own cookie and privacy policies.
3. Categorized cookie list
The table below lists the specific cookies and similar technologies currently in use on the Properties.
| Category | Cookie | Purpose | Duration | First/Third Party |
|---|---|---|---|---|
| Strictly necessary | __Host-session | Session authentication | Session | First |
| Strictly necessary | csrf-token | CSRF protection | Session | First |
| Functional | theme | Light/dark preference | 1 year | First |
| Analytics | _posthog | Anonymized product analytics | 1 year | Third (PostHog) |
| Payment | __stripe_mid | Stripe fraud prevention on payment forms | 1 year | Third (Stripe) |
Session cookies are deleted from your device when you close your browser. Persistent cookies remain on your device until their stated expiry date or until you delete them manually.
4. Your choices
You have several options for managing cookies and similar technologies:
Browser settings. Most browsers allow you to view, block, and delete cookies through the browser's settings menu. Blocking strictly necessary cookies will prevent the Properties from functioning correctly: you will not be able to log in or maintain a session. Blocking functional or analytics cookies will not prevent you from using the core features of the Properties.
Global Privacy Control (GPC). StorageFlo honors the Global Privacy Control (GPC) signal. If your browser or browser extension sends a GPC signal when you visit the Properties, we treat that as a request to opt out of any data sale or sharing subject to applicable privacy law, and we will not activate non-essential cookies for your session.
Consent banner. When our consent banner is deployed (currently in development), you will be presented with a clear choice to accept or decline non-essential cookie categories when you first visit the Properties. You will be able to update your choice at any time through the cookie preference center accessible from the footer of the Properties.
Opt-out tools for specific third parties. The third-party providers we use offer their own opt-out mechanisms, described in Section 5 below.
Deleting cookies from your browser will reset your preferences and may require you to give consent again on your next visit.
5. Third-party cookies
The following third-party providers may set cookies or use similar technologies in connection with your use of the Properties.
PostHog (analytics). We use PostHog to collect anonymized product analytics. PostHog may set the _posthog cookie on your device after you have consented. The data collected includes page views, feature interactions, and session recordings (where enabled). It does not include payment card data or government-issued identifiers. PostHog's privacy and cookie practices are described at posthog.com/privacy.
Stripe (fraud prevention). When a Stripe-powered payment form is active in the booking widget, Stripe may set the __stripe_mid cookie to detect and prevent fraudulent payment transactions. This cookie is part of Stripe's fraud prevention infrastructure. StorageFlo does not control the data Stripe collects through this cookie. Stripe's cookie practices are described at stripe.com/privacy.
We do not use advertising networks, ad exchanges, or retargeting services. We do not sell or share cookie-derived data with third parties for advertising purposes.
6. Updates
We update this Cookie Policy when we add or remove cookies or change the purposes for which existing cookies are used. The "Last updated" date at the top of this page reflects the most recent revision.
For significant changes, such as adding a new category of cookies, we will provide notice through the Properties or by email before the change takes effect.
We encourage you to review this page periodically to stay informed about our use of cookies.
7. Contact
If you have questions about this Cookie Policy or how we use cookies, please contact us at [email protected].
For general privacy inquiries, see our Privacy Policy. For data processing inquiries under the GDPR, see our DPA.
