Cookies are small files your browser stores when you visit a site. We use very few, and we don't run ad networks or social pixels on FlashRole.
1. Essential cookies (sign-in)
If your build uses Clerk: Clerk sets cookies so you can stay signed in. Names change when they ship updates; you'll typically see several starting with __clerk or __session. Those are required — blocking them means you can't use the logged-in app.
If your build uses FlashRole email sign-in: we set a first-party cookie (currently flashrole_sid, httpOnly) that keeps your session attached to the browser. Deleting it signs you out.
2. Stripe (checkout only)
When you pay, Stripe sets short-lived cookies for fraud checks. We never touch your full card number.
| Name / pattern | Set by | Purpose | Duration | Control |
|---|---|---|---|---|
| __stripe_mid / __stripe_sid / similar | Stripe | Links your browser to the payment session during checkout. | Roughly session to ~1y — see Stripe docs | Clear after purchase or via browser settings |
| m (or similar anti-fraud token) | Stripe | Risk scoring. | As set by Stripe | Same as above |
3. Preferences
Optional: we may store a small first-party preference such as theme. You can wipe it in browser settings; worst case the UI resets to defaults.
| Name / pattern | Set by | Purpose | Duration | Control |
|---|---|---|---|---|
| flashrole_theme (example) | FlashRole | Light / dark preference if we set one. | ~1 year unless you clear it | Browser settings |
4. What we don't do
No Google Analytics, no Meta pixel, no retargeting, no cross-site ad profiles.
5. Managing cookies
Use your browser's privacy settings to view or delete cookies. If you clear essentials you will be signed out.
6. Local storage & session storage
We also keep some UI and workflow state in localStorage and sessionStorage (for example drafts or onboarding flags in your browser). That isn't sent to our servers unless you trigger a feature that uploads it — check the privacy policy for what we process on the backend.
7. Updates
When this file changes, we bump the date at the top.