1. What Are Cookies
Cookies are small text files stored on your device by your browser. They are widely used to make websites work efficiently and to provide information to the operators of a site.
2. Cookies We Use
WhaleFlow.io uses a single strictly-necessary cookie to keep you signed in:
| Name | Purpose | Duration | Type |
|---|---|---|---|
| whaleflow_token | Authentication session. Keeps you signed in so you don’t have to re-enter your password on each page load. | 24 hours | Strictly necessary |
This cookie is httpOnly (cannot be read by JavaScript running on the page), scoped to the WhaleFlow origin, and uses the SameSite=Lax attribute. In production it is also marked Secure, meaning it is only sent over HTTPS.
3. Product Analytics (PostHog)
WhaleFlow uses PostHog for product analytics to understand how features are used and improve the service. PostHog may set its own cookies in your browser.
- Analytics are only active for logged-in users. Anonymous visitors are not tracked — no analytics events are captured, and no PostHog cookies are set, until you create an account and sign in.
- We collect: your user ID, account role, and product events (e.g. “alert created”, “settings opened”). We do not send your email, password, Telegram chat ID, or any trading data to PostHog.
- Session recording and autocapture are disabled. Only explicitly defined events are sent.
- You can opt out by not creating an account, or by blocking the PostHog domain in your browser or ad blocker.
4. Cookies We Do Not Use
WhaleFlow does not use:
- Advertising or remarketing cookies
- Cross-site tracking cookies
- Social-media tracking pixels
5. Local Storage
WhaleFlow stores a small number of preferences in your browser’s localStorage(theme preference, sound settings, onboarding completion status). These are not cookies and are never sent to our servers. You can clear them at any time via your browser’s developer tools or settings.
6. Managing Cookies
Because our only cookie is strictly necessary for the service to function, we do not display a cookie consent banner. If you prefer not to accept the cookie, you can:
- Use WhaleFlow without signing in (the dashboard is viewable as a visitor, though alert creation and Telegram features require an account).
- Clear the cookie at any time through your browser settings. This will sign you out.
- Configure your browser to block cookies from this domain entirely.
7. Changes to This Policy
If we introduce additional cookies in the future (for example, analytics), we will update this page and, where required by law, obtain your consent before setting them. The version and date at the top of this page identify the edition currently in force.
8. Contact
Questions about this Cookie Policy can be directed to the WhaleFlow team at legal@whaleflow.io.
See also: Privacy Policy · Terms of Service