Cookie and Local Storage Policy

Strictly necessary cookies and records

These are needed for the service to work and do not require consent:

• nf_session (cookie): keeps you signed in. It is HttpOnly and valid for 30 days at most.
• heronflow.lang (local storage): your language choice (automatic, Türkçe or English). It is shared between the app and the marketing site.
• heronflow.nano.lang (local storage): your Gemini Nano response language setting.
• heronflow.consent (local storage): remembers your cookie choice.

Measurement cookies (consent only)

If the site operator has enabled Google Analytics, Google Analytics 4 cookies (those starting with _ga and _ga_) are loaded on the marketing site only if you choose “Accept”. They measure visits anonymously and are kept for up to 2 years. If you decline, or if your browser sends a “Do Not Track” or “Global Privacy Control” signal, no analytics script is loaded. No analytics are used inside the app (/app/).

Managing your choices

If measurement is enabled, you can change your decision at any time through the “Cookie preferences” link at the bottom of the marketing site. You can also delete cookies and site data in your browser settings; if you delete the strictly necessary cookie, you will be signed out.

Third parties

When you sign in with Google, Google applies its own cookies and policies. When a CDN or security provider is used, it may set its own cookies for security and performance.