Cookie Policy

Last updated: October 15, 2026

1. What cookies are

Cookies are small text files stored in your browser when you visit a website. They make it possible, for example, to keep your session authenticated and to remember preferences. Similar technologies (such as localStorage) are covered here under the same term.

2. Which cookies FlakeDesk uses

We use essential and preference cookies and, only on the public website and with your consent, audience analytics cookies and one ad measurement cookie. We do not do remarketing or ad personalization.

• Essential (session): keep you securely authenticated in the application (signed session cookie, short-lived).
• Essential (security): protection against abuse, such as request limits and session fraud prevention.
• Preferences: remember the interface language and theme (persistent).
• Preferences (public website): when you switch the language in the footer selector of flakedesk.com, the i18nextLng cookie stores that choice for 1 year so your next visits open in the same language. It is only created if you switch the language, does not identify you, and is not shared with third parties.
• Diagnostics (optional): error telemetry for service stability, when enabled in the environment.
• Audience analytics (optional, public website only): the flakedesk.com website may use Google Tag Manager / Google Analytics to understand how the pages are used and improve them, and Microsoft Clarity to generate heatmaps (where visitors click and how far they scroll) and session recordings of page navigation. What you type into the website's forms is masked in those recordings and never reaches Microsoft. These cookies (_ga, _ga_*, _clck, _clsk) are only activated if you accept in the consent banner shown on your first visit; if you decline, no analytics script is loaded and no analytics cookie is created.
• Ad measurement (optional, public website only): when you arrive through a Google ad, the address carries a click identifier. If you choose Accept all in the banner, we store that identifier for up to 90 days in the flakedesk_ads_click cookie (first-party, set by flakedesk.com, not shared with third parties) and carry it through to the creation of your account. When an organization subscribes to a paid plan, we tell Google Ads that the click turned into a purchase, to measure the results of the ads; nothing that identifies you is sent along. Google's ad_storage and ad_user_data categories are only granted after that acceptance, and ad_personalization never is. If you decline, or choose Analytics only, no ad identifier is stored.
• Usage measurement (authenticated application): understand which screens of the product are used and where it fails, to prioritize improvements (_ga, _ga_* cookies, persistent). Enabled by default and can be turned off in Profile → Account.

The authenticated application (the CRM itself) does not use advertising cookies or third-party tracking for marketing. The ad click identifier, if you authorized it on the website, is kept only until the purchase and stops applying if you turn off measurement in Profile → Account → Usage measurement.

Usage measurement inside the application records the screen path, already without record identifiers (for example, /contacts/:id instead of the contact number), and technical browser data, as well as which actions were performed (from a closed list declared in code, with labels that do not identify anyone) and the organization's subscribed plan. It never records the content of your data, customer names, messages, or files. Google's advertising categories (ad_storage, ad_user_data, ad_personalization) remain disabled in every situation inside the application, so there is no remarketing or cross-site tracking there. There is no banner inside the application because the legal basis there is the legitimate interest in improving the contracted service, with a one-click opt-out available in Profile → Account → Usage measurement (the choice applies to the device on which it was made).

3. Legal basis (LGPD)

Essential cookies are used on the basis of legitimate interest and performance of the contract under the Brazilian General Data Protection Law (LGPD) (it is not possible to provide the authenticated service without them). Preference cookies serve your usability interest and can be deleted at any time without affecting the core of the service. Audience analytics cookies on the public website are used on the basis of consent (Google Consent Mode: they start denied and only apply after acceptance in the banner; the Microsoft Clarity script is only loaded after that acceptance), and the same applies to ad measurement, which has its own acceptance (Accept all); the choice is stored in your browser and can be revoked at any time, free of charge, through the Manage cookies link in the footer of any page of the website. When you decline, any analytics cookies already stored are deleted.

Usage measurement inside the authenticated application has a different and deliberate basis: there you are not an anonymous visitor but a customer with a contract, and what we measure is the use of the very service you subscribed to, on the basis of legitimate interest (LGPD, art. 7, IX). That is why it starts enabled, without a banner, and the control is the right to object provided for in art. 18, §2: the opt-out in Profile → Account → Usage measurement, available at any time and without affecting any functionality.

4. How to manage

For analytics cookies, use the Manage cookies link in the footer of any page of the website: it reopens the banner and shows your current choice, letting you accept or decline as many times as you like. Revoking is as simple as consenting and does not require contacting us (LGPD art. 8, §5).

You can also delete or block cookies in your browser settings. Blocking essential cookies prevents login and use of the application. Per-browser instructions: Chrome, Firefox, Safari, and Edge document cookie management in their official help pages.

5. Changes and contact

We may update this policy to reflect changes in the service. Questions: reach us through the contact page. See also the Privacy Policy and the Terms of Use.