Legal
Cookie Policy
Last updated · 2026-05-16
qlows uses cookies and similar storage technologies in three categories. Essential storage runs always because the site cannot function without it. Analytics and Marketing only fire if you opt in via the cookie banner — which you can reset and re-choose at any time using the button at the bottom of this page.
Essential
Always on. Required for the site to function. No opt-out option as without these the Service cannot be provided.
| Cookie / key | Provider | Purpose | Lifetime | Region |
|---|---|---|---|---|
| qlows-consent-v1 | qlows (first-party, localStorage) | Remembers your cookie-banner choice | 12 months | Your browser |
| session | qlows (first-party, httpOnly cookie) | Keeps you signed in and bound to your workspace | 30 days (sliding) | EU or US (per workspace region) |
| ui-prefs | qlows (first-party, localStorage) | Theme, billing-period toggle, similar UI state | 12 months | Your browser |
Analytics — opt-in
Helps us understand which pages help and which don’t. Aggregated, no cross-site tracking. These cookies are loaded only after you click “Accept all” or enable Analytics in the cookie preferences.
International transfer. Microsoft Clarity and Google Analytics 4 may transfer data to the United States. We rely on the EU-US Data Privacy Framework and Standard Contractual Clauses for these transfers, and we enable IP-truncation and EU-region collection where available.
| Cookie / key | Provider | Purpose | Lifetime | Region |
|---|---|---|---|---|
| _clck, _clsk | Microsoft Clarity (clarity.ms) | Session recordings + heatmaps, PII masked by default | 1 year / 1 day | US (DPF) |
| _ga, _ga_* | Google Analytics 4 (google-analytics.com) | Page-level metrics, traffic source | 2 years | US (DPF) with EU regional collection |
Marketing — opt-in
Lets us reach similar audiences with relevant offers. Loaded only after explicit consent. As of the Effective Date, the tags below are configured in our Google Tag Manager container and fire only when both (a) you opt in to Marketing, and (b) we activate the specific tag.
| Cookie / key | Provider | Purpose | Lifetime | Region |
|---|---|---|---|---|
| _fbp | Meta Pixel (facebook.com) | Conversion tracking for Facebook + Instagram ads | 3 months | US (DPF) |
| li_fat_id, li_sugr | LinkedIn Insight (linkedin.com) | Conversion tracking for LinkedIn ads | 30 days / 3 months | US (DPF) / EU |
| _gcl_au, IDE | Google Ads (googletagmanager.com) | Conversion attribution | 90 days / 13 months | US (DPF) |
Consent mode
We use Google Consent Mode v2 with default-deny: analytics_storage, ad_storage, ad_user_data, and ad_personalization start denied for every visitor. Tags fire in cookieless mode (no identifiers, no advertising signal) until you opt in via the banner. This default state is set in the page’s <head> before any tag loads.
Your choice
You can change your consent at any time using the button below. That clears your saved choice and brings the banner back so you can pick again. A record of your choice (granted/denied + timestamp + version) is stored in your browser only — we do not have a server-side consent log.
Controlling cookies in your browser
Your browser can block cookies — that may break sign-in. Blocking the essential session cookie means you won’t be able to use the qlows app.
Changes
We’ll update this page when our cookie use changes. Material changes are announced to active accounts by email and the cookie banner re-prompts so you can re-choose.