1. What cookies and similar technologies are
Cookies are small text files stored by a website or its providers. Similar technologies include local storage, pixels, tags and software development kits. They can remember a session or choice, protect a service, measure use and connect a visit with an advertising campaign. This policy covers those technologies when you use PaddleFlo.
2. Your choices
We load essential technology where it is necessary to provide a service you request or protect PaddleFlo. We do not load optional PostHog analytics, Google Ads or Meta Pixel on the marketing site unless you consent to the relevant category.
The first layer of our consent banner provides Accept all, Reject optional and Manage preferences controls. Optional categories are off by default in the preference layer. Your choice is stored for up to 180 days, after which we may ask again. You can reopen Cookie settings in the footer at any time. Withdrawing consent stops future optional collection; it does not make earlier consented processing unlawful.
3. Essential storage
Essential storage supports authentication, security, load balancing, checkout, fraud prevention and privacy preferences. It cannot be switched off through our banner because the requested service may not work correctly without it.
- PaddleFlo consent preference — local-storage key paddleflo:cookie-consent — records the selected categories, policy version and choice date — up to 180 days.
- PaddleFlo and authentication cookies — names can vary by app and session — maintain secure login, portal access, workspace context and anti-abuse controls — session-based or for the limited duration configured for the login.
- Paddle checkout and price-preview storage — set by Paddle when pricing or checkout functionality is requested — supports secure payment, fraud prevention, tax and localised checkout — duration is controlled by Paddle and varies by item.
4. Analytics: PostHog
If you enable Analytics, PostHog helps us understand page visits and selected interactions, find usability problems and improve PaddleFlo. Our marketing configuration disables session recording and automatic interaction capture. We send page views and selected events such as clicking a signup link. PostHog may use a cookie or local-storage item whose name begins ph_ and ends _posthog; its default persistence can last up to one year, but our consent choice is renewed sooner.
Analytics is off until you consent. If you later turn it off, we instruct PostHog to opt out and remove known first-party PostHog storage where the browser permits.
5. Advertising: Google Ads
If you enable Advertising, Google Ads helps attribute visits and configured signup actions to advertising campaigns, measure campaign performance and support relevant advertising. Depending on Google’s configuration and how you arrived, storage may include _gcl_au, _gcl_aw, _gac_ or Google-domain cookies, commonly lasting up to 90 days for advertising attribution. Google controls its own-domain storage and may combine information according to its privacy terms.
We use a basic consent approach: the Google advertising tag is not loaded before advertising consent. When consent is withdrawn, we send denied consent signals and remove known first-party Google advertising storage where the browser permits.
6. Advertising: Meta Pixel
If you enable Advertising, Meta Pixel helps measure visits and configured events from Facebook and Instagram advertising, build campaign reports and support relevant advertising. Meta-related first-party cookies can include _fbp and _fbc and commonly last up to 90 days. Meta may receive IP address, device and browser information, page and campaign data and the event being measured.
Meta Pixel is not loaded before advertising consent. When consent is withdrawn, we send a revoke signal and remove known first-party Meta storage where the browser permits. We cannot directly remove storage placed on another provider’s domain; you can manage that through the provider and browser controls.
7. Browser and provider controls
Most browsers let you inspect, block and delete cookies or clear site data. Blocking all storage may prevent login, checkout, portal, security and preference features from working. Browser privacy signals and provider account settings may offer additional controls, but they do not replace the choices available through our banner.
For more about each provider, see PostHog’s privacy information at posthog.com/privacy, Google’s information at policies.google.com/technologies/ads, Meta’s cookie information at facebook.com/privacy/policies/cookies, and Paddle’s information at paddle.com/legal/privacy.
8. Changes and contact
We update this policy when cookies, providers, purposes or retention periods change. If a change requires a new consent, we will ask again before using the affected optional technology. Questions can be sent to support@paddleflo.com.
Questions about this page? Email
support@paddleflo.com.