Cookie Policy

1. Overview

This Cookie Policy explains how Growthflicks d.o.o. (“Growthflicks,” “we,” “us,” or “our”) uses cookies and similar tracking technologies on our website and platform (collectively, the “Service”). It explains what these technologies are, why we use them, and your rights to control their use.

This Cookie Policy should be read in conjunction with our Privacy Policy, which provides broader information about how we handle your personal data.

By continuing to use our Service, you consent to our use of cookies as described in this policy. You can manage or withdraw your consent at any time using the methods described in Section 7.

2. What Are Cookies

Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.

Cookies set by the website owner (in this case, Growthflicks) are called “first-party cookies.” Cookies set by parties other than the website owner are called “third-party cookies.”

We use the following types of technologies:

• Cookies: text files stored on your device that are sent back to our servers on each request.
• Local storage: browser-based key-value storage used for session state and UI preferences that does not expire automatically.
• Session storage: similar to local storage but cleared when the browser tab is closed.
• Pixels and web beacons: small transparent images embedded in emails or pages that allow us to know when they were opened or visited.

3. Essential Cookies

Essential cookies are strictly necessary for the Service to function correctly. Without these cookies, parts of the Service may not work as intended. These cookies do not require your consent under applicable law, but we provide this information for transparency.

Authentication

• session_token — stores your encrypted session identifier so you remain logged in across page loads. Expires at the end of your browser session or after 30 days if “Remember me” is selected.
• auth_state — a short-lived nonce used during OAuth flows to prevent CSRF attacks. Expires after 10 minutes.

Security

• csrf_token — a per-session token included in form submissions to protect against cross-site request forgery attacks. Session-scoped.

Infrastructure

• __cf_bm — set by Cloudflare to distinguish between humans and bots. Expires after 30 minutes.
• __cflb — set by Cloudflare for load balancing. Session-scoped.

Consent

• gf_cookie_consent — stores your cookie consent preferences. Expires after 12 months.

4. Analytics Cookies

Analytics cookies help us understand how visitors interact with the Service. The data collected is used to improve usability and performance. These cookies collect information in aggregate and do not directly identify individual users.

We use analytics cookies to track page views, feature usage, session duration, error rates, and funnel conversions. This helps us prioritise improvements and understand which parts of the platform are most valuable.

Cookies Used

• _gf_analytics — first-party analytics cookie that tracks anonymous usage events within the platform. Expires after 13 months.
• _gf_session_id — first-party cookie that groups events into sessions for analytics. Expires after 30 minutes of inactivity.

You can opt out of analytics tracking by adjusting your cookie preferences in your account settings, or by using the method described in Section 7.

5. Preference Cookies

Preference cookies allow the Service to remember choices you make and provide more personalised features. For example, they remember your billing toggle setting (monthly vs. yearly) and UI preferences such as sidebar state.

Cookies Used

• gf_billing_period — stores whether you last selected monthly or annual billing on the pricing page. Expires after 90 days.
• gf_ui_prefs — stores UI state such as collapsed panels or selected tabs. Stored in local storage; cleared on account logout.
• gf_locale — stores your preferred language or locale if you have selected one manually. Expires after 12 months.

Disabling preference cookies will not prevent you from using the Service but may mean that some settings are reset when you return.

6. Third-Party Cookies

Some cookies on our Service are set by third-party service providers we use. We do not control these cookies, and you should refer to those providers' privacy policies for more information.

Stripe (Payment Processing)

When you access our checkout or billing pages, Stripe may set cookies for fraud detection and session management. These cookies are essential to payment security. See Stripe's Privacy Policy.

Social Media Platforms

When you authorise Growthflicks to connect to your social media accounts, the OAuth flow may involve cookies set by those platforms (Instagram, TikTok, YouTube, Threads). We have no control over such cookies, which are governed by those platforms' own policies.

AI Infrastructure Providers

API calls to third-party AI model providers are made server-side. These providers do not set cookies in your browser as a result of your use of our Service.

7. Managing Your Cookie Preferences

Through Our Platform

Logged-in users can manage non-essential cookie preferences from the Settings → Privacy section of the platform. Changes take effect immediately.

Through Your Browser

All major browsers allow you to control cookies through their settings. You can typically find these in the “Privacy,” “Security,” or “History” section of your browser's preferences. Options include:

• Blocking all cookies (note: this will prevent you from logging in);
• Deleting all existing cookies;
• Blocking or allowing cookies from specific domains;
• Being notified before cookies are stored.

Browser-specific guidance is available here:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

8. Do Not Track

Some browsers include a “Do Not Track” (“DNT”) feature that signals to websites that you do not want to be tracked across sites. There is currently no industry-wide technical standard for DNT signals.

We respect your privacy choices. Where technically feasible, we will honour browser-level tracking preference signals. You can always manage your preferences directly through our platform settings.

9. Updates and Contact

We may update this Cookie Policy from time to time as our practices evolve or when required by changes in law. The date at the top of this page reflects the most recent revision. We will notify you of material changes via email or an in-app notice.

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Related policies: Privacy Policy · Terms of Service · Data Processing Agreement