Storage and choices
HandFlow uses cookies and browser session storage for sign-in, protected request access and booking continuity.
- Sign-in cookies: hf_session, hf_client_session and hf_admin_session keep the relevant role signed in. Email sessions last up to one hour or the shorter provider expiry. Relevant logout clears its role cookie.
- Tab storage: hf_platform_* entries hold booking/profile drafts, submission retries, identity steps and saved request access. Some contain contact details or private access tokens. Reloading a page does not necessarily clear them; browser tab restoration can preserve them.
- Optional Google sign-in: temporary flow cookies, if the feature is enabled, last up to ten minutes. Google sign-in is not currently available.
The native client has no advertising, analytics or session-replay feature. External services may use their own storage. Calling it session storage does not automatically remove consent requirements. Where no applicable exception covers a use, it must not run without valid prior consent.
On shared devices, sign out and clear this site’s cookies and site data, including saved guest access. Blocking storage may prevent protected access or restoring drafts. Clearing browser storage does not delete server records. External payment or sign-in services may apply their own notices.
Questions: [email protected]. See the Privacy Notice for data rights.