What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, to remember your preferences, and to provide reporting information to site owners.
This policy explains how Floq (operated by CasaPay) uses cookies and similar technologies — including local storage and session storage — when you use our website at floq.casapay.com or our web application.
How we use cookies
We use cookies for the following purposes:
- Essential functionality — keeping you signed in, securing your session, and enabling core features of the application.
- Preferences — remembering your settings, such as your cookie consent choice.
- Analytics — understanding how visitors use our site so we can improve it. Analytics are only active if you consent.
Cookie categories
We categorise cookies into the following types:
Functional Cookies
Required — cannot be disabled
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Stores your authenticated session | 1 year |
| floq-cookie-consent | Floq (localStorage) | Stores your cookie consent preferences | Until cleared |
Analytics Cookies
Optional — only with your consent
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Website analytics — page views, session duration, traffic source, anonymised device and location data | 14 months |
| ph_* | PostHog | Product analytics — feature usage, funnel steps, anonymised session data | 1 year |
Managing your preferences
You can change your cookie preferences at any time by clicking Cookie settings in the footer of any page — this re-opens the consent banner.
Preferences are stored in your browser's local storage (not as an HTTP cookie), so they persist until you clear your browser data or reset your preferences via the link above.
You can also control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Note that disabling functional cookies may prevent parts of the service from working correctly.
For more information on managing cookies across different browsers, visit aboutcookies.org.
Data transfers
We are committed to keeping your data within the UK and EU/EEA wherever possible:
- Supabase — EU-hosted. No transfer outside the UK/EU.
- PostHog — we use PostHog EU Cloud (posthog.eu). Data is stored and processed in the EU. No transfer outside the EU.
- Google Tag Manager & Google Analytics 4 — data may be processed by Google outside the UK/EU. Google's data processing terms include Standard Contractual Clauses as the transfer mechanism. Analytics are only loaded with your consent.
- Google (Gemini API) — data may be processed by Google outside the UK/EU. Google's data processing terms include Standard Contractual Clauses as the transfer mechanism.
Third-party services
Some functionality on our site is provided by third parties. These services may set their own cookies subject to their own privacy policies:
- Supabase — authentication and database infrastructure. Privacy policy
- Google Tag Manager & GA4 — tag management and website analytics (consent required). Privacy policy
- PostHog — product analytics (consent required). Privacy policy
Do Not Track
Some browsers include a “Do Not Track” feature that signals to websites that you do not want your browsing activity tracked. Our site does not currently alter its behaviour in response to Do Not Track signals, but you can use the cookie preferences above to control tracking directly.
Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in technology, law, or our services. When we make material changes, we will update the “Last updated” date at the top of this page.
Contact
Questions about this policy? Reach us at privacy@casapay.com.