1. What cookies are
Cookies are small text files a website stores in your browser. They let a site remember things between pages, such as the fact that you are signed in. This policy explains the cookies used on skinsflow.com and its subdomains (dashboard, verify, pay and api), operated by Skinsflow Limited.
2. Cookies we use
Every cookie below is strictly necessary: the Service cannot work securely without it. Because of that, we do not ask for consent before setting them, but we want you to know exactly what they are.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| SFSESSID | SkinsFlow | Keeps you signed in while you use the dashboard, protects forms against cross-site request forgery, and carries one-time messages between pages. | Until you close the browser; expires on the server after 8 hours without activity |
| SFAUTH | SkinsFlow | "Remember me": keeps you signed in on this device. Contains a signed token, not your password. | 7 days, or until you sign out |
| cf_clearance, __cf_bm and similar | Cloudflare | Security check (Cloudflare Turnstile) on sign-in, registration and password reset, and protection of our sites against bots and attacks. | Up to 1 year, depending on the cookie |
Our cookies are marked Secure, HttpOnly and SameSite and are shared only across skinsflow.com subdomains so that you stay signed in when you move between them.
The checkout at pay.skinsflow.com does not rely on cookies to work, so it also works when a merchant embeds it on their own site.
3. Cookies we do not use
- No advertising or remarketing cookies.
- No analytics or statistics cookies.
- No social media pixels or embedded trackers.
Our fonts and scripts are served from our own servers, so viewing our pages does not send your data to third-party font or script providers.
4. Local storage
Where a page keeps a small preference in your browser's local storage, for example which section of a page you last opened, it stays on your device, is never sent to us, and is not used to track you.
5. Your choices
You can delete or block cookies in your browser settings. If you block the cookies above, you will not be able to sign in to the dashboard, and security checks may fail.
6. Changes
If we ever add a cookie that is not strictly necessary, we will update this policy first and ask for your consent where the law requires it.
7. Contact
Questions about cookies or privacy: [email protected]. See also our Privacy Policy.
Questions about this document? Write to [email protected].
Other policies: Terms of Service · Privacy Policy · AML & KYC Policy · Acceptable Use Policy · Company details