Legal

Cookie Policy

What you need to know in 30 seconds Flow & Glow uses a small number of cookies on this website. We use strictly necessary cookies to keep the site working, optional functional cookies to remember your preferences, and optional analytics cookies to understand how visitors use the site. We do not use advertising cookies, tracking cookies, or any cookie that processes your health data. You can accept or decline optional cookies at any time using the cookie banner or the Cookie Settings link in the footer.

SECTION 1

1.  Who We Are

This Cookie Policy applies to the Flow & Glow website at flowandglow.app, operated by DCODAX LTD, a company incorporated in Scotland (Company No. SC819482) with its registered office at Flat C, 63 Linthaugh Road, Glasgow, Scotland, G53 5TS, United Kingdom.

For questions about this policy, contact us at privacy@flowandglow.app. Our Data Protection Officer can be reached at dpo@flowandglow.app.

 

SECTION 2

2.  What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the site work properly and allow us to understand how it is being used.

This policy also covers similar technologies, including web storage (localStorage, sessionStorage), pixels, and tracking scripts, to the extent we use any of them. All of the rules below apply equally to those technologies.

 

SECTION 3

3.  What We Do NOT Use

Flow & Glow does not use advertising cookies, behavioural profiling cookies, retargeting cookies, or any cookie that processes your health data. We have no Meta Pixel, Google Ads tags, TikTok Pixel, or any other ad-network tracking on this website.

This commitment is consistent with our broader privacy promise. Your cycle and health data stays yours. No advertiser ever sees it.

 

SECTION 4

4.  Cookies We Use

We use three categories of cookies. The table below lists every cookie currently active on flowandglow.app.

Category A: Strictly Necessary

These cookies are essential for the website to function. They cannot be switched off. No consent is required because they are used only in response to actions you take, such as signing in or saving your preferences. They do not store any personally identifiable health information.

 

Cookie Name

Provider

Purpose

Type

Duration

Legal Basis

session_id

Flow & Glow

Keeps you logged in during your session

1st

Session

Contract (PECR Reg 6 exempt)

csrf_token

Flow & Glow

Prevents cross-site request forgery attacks

1st

Session

Contract (PECR Reg 6 exempt)

fg_consent

Flow & Glow

Stores your cookie consent choices

1st

12 months

PECR Reg 6 exempt (consent record)

__cf_bm

Cloudflare

Bot detection and DDoS protection

3rd

30 min

Legitimate interests (security)

cf_clearance

Cloudflare

Confirms successful security challenge

3rd

30 min

Legitimate interests (security)

__stripe_mid

Stripe

Fraud prevention for payment processing

3rd

1 year

Contract (payment processing)

__stripe_sid

Stripe

Manages payment session state

3rd

Session

Contract (payment processing)

Category B: Functional (Preferences)

These cookies remember your preferences to give you a better experience, for example your language setting. They are optional. If you decline them, the site still works but some preferences will not be remembered between visits.

 

Cookie Name

Provider

Purpose

Type

Duration

Legal Basis

fg_locale

Flow & Glow

Remembers your language preference

1st

1 year

Consent or DUAA appearance exception

fg_theme

Flow & Glow

Remembers your display theme preference

1st

1 year

Consent or DUAA appearance exception

 

Category C: Analytics

These cookies help us understand how visitors use the website so we can improve it. All analytics data is aggregated and anonymised. We use a privacy-respecting, first-party analytics tool. We do not use Google Analytics or any analytics service that shares data with advertising networks.

 

Cookie Name

Provider

Purpose

Type

Duration

Legal Basis

_plausible

Plausible Analytics (self-hosted)

Counts page visits and measures site usage. No cross-site tracking. IP anonymised.

1st

Session

Consent (or DUAA statistical exception where criteria met)

Our analytics tool is self-hosted and privacy-respecting. It does not use cookies that track you across other websites and does not process any health data. All data is aggregated before we see it.

SECTION 5

5.  Your Consent and Your Choices

When you first visit flowandglow.app, a cookie banner will appear. You can accept all cookies, decline optional cookies, or manage your preferences by category. Your choice is stored for 12 months.

You can change your choice at any time by clicking the Cookie Settings link in the footer of any page. This reopens the preference centre where you can update your selection.

You can also manage or delete cookies directly in your browser settings. The links below provide instructions for the most common browsers:

 

Please note that deleting cookies through your browser will reset your cookie preferences on our website and you may be shown the consent banner again on your next visit.

 

SECTION 6

6.  Withdrawing Consent

If you have consented to optional cookies, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew. To withdraw consent:

 

SECTION 7

7.  Third-Party Cookies and Opt-Outs

The only third-party cookies we use are the Cloudflare security cookies and the Stripe payment cookies listed in Section 4. Both are strictly necessary. We do not use any advertising, social-media, or data-broker third-party cookies.

For general opt-out tools maintained by the advertising industry:

These tools are provided as a reference. Because we do not use advertising cookies, they will have no additional effect on cookies placed by Flow & Glow.

 

SECTION 8

8.  Health Data and Cookies

Important

No cookie on flowandglow.app processes your health data. Your cycle logs, symptoms, mood entries, and any other health information you add to the app are stored separately and are never accessible via any cookie or web-tracking technology. This commitment is architectural, not just a policy statement.

 

SECTION 9

9.  Changes to This Policy

We update this policy whenever we change the cookies we use. When we make a material change, we will update the effective date at the top of this page and, where required, ask for fresh consent via the cookie banner. The version history is maintained at flowandglow.app/cookies/changelog.

 

SECTION 10

10.  Contact and Complaints

Flow and Glow

Privacy enquiries: privacy@flowandglow.app

Data Protection Officer: dpo@flowandglow.app

Postal address: Flat C, 63 Linthaugh Road, Glasgow, Scotland, G53 5TS, United Kingdom

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. If you are in the EEA, you may contact your national data protection authority.

 

Your body is yours. Your data is yours.

That includes what your browser tells us.