Cookie Policy
Every cookie, named.
Last updated October 9, 2026. Written in plain English on purpose; where a sentence is short, it is because the rule is simple.
The product uses only the cookies it needs to keep you signed in. The website asks before setting anything for analytics or advertising, and works fully if you say no.
1. What a cookie is
A small text file a website stores in your browser so it can recognize you next time: to keep you signed in, remember a setting, or count a visit. We also use the browser's local storage for the same purposes; this policy treats the two the same way.
2. In the product (dashboard.usewrapflow.app)
No analytics, no advertising, no third-party cookies. Only these:
| Name | Set by | What it does | Lasts | Type |
|---|---|---|---|---|
| Session cookie | Us | Keeps you signed in. Set only on dashboard.usewrapflow.app, never sent to the website. | Until you sign out, at most 30 days | Necessary |
| wf-theme | Us | Light or dark. | Until cleared | Necessary |
| Device token | Us | Keeps a paired wall tablet signed in to the clock and nothing else. | Until unpaired | Necessary |
3. On the website (usewrapflow.app)
Necessary cookies are always set. Analytics and marketing cookies are set only after you choose them in the banner, and the Google Consent Mode and Meta signals stay “denied” until then, so nothing is collected in the meantime.
| Name | Set by | What it does | Lasts | Type |
|---|---|---|---|---|
| wf-consent | Us | Remembers what you chose in the cookie banner. | 12 months | Necessary |
| wf-theme | Us | Remembers light or dark. | Until cleared | Necessary |
| _ga, _ga_* | Google Analytics 4 | Tells us which pages are read and where visitors come from. IP addresses are anonymized. If you also accept marketing cookies, Google signals is on for your visit: see section 4. | 14 months | Analytics |
| _gcl_* | Google Ads via Tag Manager | Measures whether an ad led to a sign-up. | 90 days | Marketing |
| _fbp, _fbc | Meta Pixel | Measures whether a Meta ad led to a sign-up and lets us show ads to people who visited. | 90 days | Marketing |
Google's and Meta's own policies explain what they do with the data they receive: Google (opens in a new tab), Meta (opens in a new tab).
4. Google signals
We have Google signals turned on in Google Analytics. It only applies to you if you chose Best experience in the banner, which allows marketing cookies; with any other choice Google treats advertising features as denied and signals stays off for your visit.
When it applies, Google does two extra things with the analytics data: it links your visits across the devices where you are signed in to a Google account with Ads Personalization turned on, so a visit from your phone and a later one from your laptop count as one person; and it reports the age range, gender and interests of our visitors to us in aggregate, never for a named person, and only when enough people are in a group that nobody can be picked out. Google may also use the data to personalize ads it shows you elsewhere. Some state privacy laws count that as “sharing” personal information for advertising; see your rights in the Privacy Policy.
To stop it: choose and pick Customized experience or Working website; turn off Ads Personalization in your Google Ads settings (opens in a new tab); or install the Google Analytics opt-out add-on (opens in a new tab). We also honor the Global Privacy Control (opens in a new tab) signal: when your browser sends it, we treat it as a no to marketing cookies without asking. Google explains signals in its own words here (opens in a new tab). Analytics data is kept at Google for 14 months, then deleted.
5. Your choice
Change it any time: . The banner comes back and your new answer replaces the old one. Declining never affects the product or your shop.
6. In your browser
Every browser lets you see, block and delete cookies in its settings. Blocking the product's session cookie means you cannot stay signed in; blocking everything else has no effect on WrapFlow.
Questions: hello@usewrapflow.app. WrapFlow is operated by Clicks & Clients LLC, Georgia, United States.