Cookies and local storage
Last updated: 26 July 2026
Innflyt does not use cookies for analytics, advertising, or tracking, on any of its surfaces. There is no consent banner because there is nothing to consent to — every item listed below is either strictly necessary for a service you asked for, or written only when you yourself act.
We publish this page anyway. A visitor should be able to see exactly what is stored on their device without having to take our word for it, and without signing in.
The Innflyt widget on a customer's website
The widget sets no cookies at all. It uses two localStorage entries on the website where it is installed:
| Name | Purpose | Written when | Category | Retention |
|---|---|---|---|---|
innflyt_beta_notice | Remembers that you dismissed the beta notice, so it does not reappear on every page | Only when you dismiss the notice | Strictly necessary (acting on your own choice) | Until you clear site data |
innflyt_anonymous_email | Pre-fills your email address the next time you send feedback from the same device | Only when you submit feedback with an email address | See the note below | Until you clear site data |
Nothing is written when the widget merely loads. It reads these entries on load, which the European Data Protection Board treats as exempt, but it writes only in response to something you did.
A note on innflyt_anonymous_email, in the interest of not overstating our position. This entry stores a personal identifier — your email address — for your convenience. It is the one item on this page where a strict reading of the ePrivacy Directive could reasonably call for consent rather than an exemption. We are removing it rather than defending it. Until that change ships, we describe the widget as "no cookies, minimal storage" rather than "consent-free", and you can prevent the entry entirely by leaving the email field blank.
innflyt.com (this website)
| Name | Purpose | Provider | Party | Category | Retention |
|---|---|---|---|---|---|
innflyt-locale | Remembers whether you chose English or Norwegian | Backroad AS | First party | Strictly necessary (a preference you set) | 1 year |
This cookie is set only when you change the language. Visit the site and read it without touching the language switch and nothing is stored on your device.
There is no analytics on this website — no Google Analytics, no Meta pixel, no session recording, no fingerprinting.
app.innflyt.com (the customer dashboard)
Measuring dashboard use. From 27 July 2026 we also count page views inside the dashboard, using the same Cloudflare Web Analytics described above — no cookies, nothing written to your device, no persistent identifier, and no tracking across sites. We use it to see whether people who create an account go on to set a property up, so we can fix the parts where they get stuck.
This one is worth calling out separately, because here you are a signed-in customer rather than an anonymous visitor. Even so, what we receive is the same aggregate information: pages viewed, referrer, country, browser and device type. It is not joined to your account, and it does not tell us what any individual person did.
The dashboard is behind a login, so it necessarily stores a session.
| Name | Purpose | Provider | Party | Category | Retention |
|---|---|---|---|---|---|
innflyt-locale | Interface language | Backroad AS | First party | Strictly necessary | 1 year |
| Clerk session and client cookies | Keeps you signed in and protects against session hijacking | Clerk (Clerk.com, United States) | First party, set via clerk.innflyt.com | Strictly necessary | Session, and a rolling client identifier |
__cf_bm, _cfuvid | Bot detection and abuse prevention in front of the authentication service | Cloudflare, Inc. | Third party, on clerk.innflyt.com | Strictly necessary (security) | 30 minutes and session, respectively |
Authentication cookies are exempt from consent under the ePrivacy Directive because they are required to deliver a service you explicitly asked for — being logged in.
Where authentication data is processed. Clerk processes sign-in data in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. Your feedback data itself is stored in the European Economic Area (Supabase, Stockholm). We do not claim that no data leaves the EEA, because that would not be true of the login path. See the Privacy Policy and the Processor Information page.
Measuring visits to this website
We count page views on innflyt.com and innflyt.no using Cloudflare Web Analytics, which is enabled at our Cloudflare edge and turned on for all visitors, including visitors in the European Economic Area, from 27 July 2026.
It is worth being precise about what this is, because "analytics" usually means something more invasive:
- It sets no cookies and writes nothing to your device. The statement above — that we use no cookies for analytics — remains true.
- It does not use a persistent identifier, a fingerprint, or any cross-site tracking, so it cannot follow you to another website or recognise you on a later visit.
- We see aggregate counts: pages viewed, referrer, country, browser and device type. We do not see who you are.
- Cloudflare is already the network in front of this site and is listed as a sub-processor on our Processor Information page, so this adds no new company to the list.
There is still no consent banner, because there is still nothing stored on your device to consent to.
What we do not do
- No advertising or marketing cookies, and no data sold or shared with advertisers
- No cross-site tracking, no fingerprinting, no session recording or heatmaps
- No third-party analytics on any Innflyt surface
Managing what is stored
Every browser can block or delete cookies and local storage for a given site, usually under Privacy or Site settings. Blocking the strictly-necessary items above will log you out of the dashboard and reset your language choice, but nothing else will break.
Questions
Write to [email protected]. You can also complain to the Norwegian Data Protection Authority (Datatilsynet), Oslo, Norway.
Backroad AS · organisation number 934 341 929 · Bergen, Norway