Cookie Policy · Everdeck

Draft for review. This policy is a draft pending review by a Singapore-qualified lawyer. It is not final and may change before Everdeck launches.

Everdeck, provided by FLOW FN PTE. LTD. (UEN 202617303Z), uses only essential cookies: the ones needed to sign you in, keep your session secure and protect our forms. We don't use advertising or analytics cookies, which is why we don't show a cookie banner.

Cookies we set

Name	What it does	How long it lasts
`__Host-ed_session`	Keeps you signed in. It holds a random token, of which we store only a hash, and scripts on the page can't read it.	Up to 30 days. It stops working after 7 days without use, or when you sign out.
`__Host-ed_csrf`	Protects our forms and the app against cross-site request forgery, where another website tries to act as you.	Until you close your browser.
`ed_reset`	Holds the password reset link you opened from our email, so the link doesn't stay in your browser's address bar or history. Only the password reset page receives it, and scripts on the page can't read it.	30 minutes, or until you set your new password.

The __Host- at the start of a name tells your browser to accept that cookie only over a secure connection and only from the Everdeck app's own address, so no other website, including our other subdomains, can set it.

Cookies set by our service providers

Provider	What it does	How long it lasts
Cloudflare	On the sign-up, sign-in and password reset pages, Turnstile (Cloudflare's bot check) and the network that serves our site may set short-lived security cookies, such as `__cf_bm`, that tell people from bots.	Short-lived, usually 30 minutes.
Stripe	When you start a subscription or manage billing, you use pages hosted by Stripe, which sets its own cookies for payments and fraud prevention under Stripe's privacy policy.	As set by Stripe.

Other things stored in your browser

The app also keeps these in your browser's storage. Unlike cookies, they aren't sent to us with your requests.

Name	What it does	How long it lasts
`everdeck-theme`	Remembers whether you chose the light, dark or system theme.	Until you clear your browser's site data (local storage).
`everdeck-selection`	Remembers which account and company you last worked in.	Until you clear your browser's site data (local storage).
`everdeck-members-invite`	Keeps an invitation you were writing, the invitee's email address and role, while you confirm it's you with your second factor.	Removed when the invitation form opens again, or when you close the tab (session storage).
`everdeck-members-step-up`	Remembers which change to a member's access you were making (the member and the new role, or an ownership transfer) while you confirm it's you with your second factor, so the dialog reopens where you left off.	Removed when the change is made or the dialog closes, or when you close the tab (session storage).
`everdeck-ai-keys-step-up`	Remembers which AI key change you were making while you confirm it's you with your second factor, so the page returns to it.	Removed when the change is made or the page opens again, or when you close the tab (session storage).
`everdeck-ai-keys-form`	Keeps what you typed into the add-key form (provider, label, scope; never the key itself) while you confirm it's you with your second factor.	Removed when the form opens again, or when you close the tab (session storage).
`everdeck-approvals-step-up`	Keeps the approval decision you were making (and any edits) while you confirm it's you with your second factor. Nothing is decided until you submit again.	Removed when the decision reopens, or when you close the tab (session storage).
`everdeck-policies-step-up`	Keeps the approval rule you were editing while you confirm it's you with your second factor. Nothing changes until you save again.	Removed when the editor reopens, or when you close the tab (session storage).
`everdeck-sync-step-up`	Keeps the change you were making on the Task sync page (never a secret) while you confirm it's you with your second factor.	Removed when the change is sent, or when you close the tab (session storage).
`everdeck-intake-step-up`	Keeps the change you were making on the Intake page (never a secret) while you confirm it's you with your second factor.	Removed when the change is sent, or when you close the tab (session storage).
`everdeck-mcp-servers-step-up`	Keeps the change you were making on the MCP servers page (never a secret) while you confirm it's you with your second factor.	Removed when the change is sent, or when you close the tab (session storage).
`everdeck-api-servers-step-up`	Keeps the change you were making on the API servers page (never a secret) while you confirm it's you with your second factor.	Removed when the change is sent, or when you close the tab (session storage).
`everdeck-chat-approvals-step-up`	Keeps the change you were making on the Chat approvals page (never a secret) while you confirm it's you with your second factor.	Removed when the change is sent, or when you close the tab (session storage).
`everdeck-account-step-up`	Keeps which account-wide pause or resume you were making, and the note you typed, while you confirm it's you with your second factor. Nothing is paused or resumed until you confirm again.	Removed when you come back to the Account page after confirming, or when you close the tab (session storage).
`everdeck-task-filters`	Remembers the filters and view you chose on the task board.	Until you close the tab (session storage).

Your choices

You can block or delete cookies in your browser's settings. If you block the essential cookies above, you won't be able to sign in or send forms on this site.

Changes

If we ever want to use cookies that aren't essential, we will ask for your consent first and update this policy.

Questions: [email protected].