Cookie Policy
Our cookie policy and how we use them
Last updated: 14 November 2026
This policy explains the cookies and similar technologies Flow Bucket, run by Brainium Labs Pty Ltd (ABN 44 621 469 298) (“we”, “us”), uses on our website at flowbucket.ai, the web app and the client approval pages, and how you can control them. It forms part of our Privacy Policy.
1. What cookies are
Cookies are small text files a website stores in your browser. We also use your browser’s local storage, which works in a similar way but is never sent to our servers. In this policy, “cookies” covers both.
2. The cookies we use
Flow Bucket uses only the cookies it needs to sign you in, keep your account secure and remember your settings. We don’t use analytics or advertising cookies. If that changes, we’ll update this policy first, and ask for your consent where the law requires it.
3. Essential cookies
These keep you signed in and protect your account. In production, their names start with __Secure-. The client approval pages don’t set a sign-in cookie.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
better-auth.session_token | Flow Bucket | Keeps you signed in and protects your session | 7 days, renewed while you use Flow Bucket |
better-auth.two_factor | Flow Bucket | Links the two steps of a two-factor sign-in | 10 minutes |
better-auth.trust_device | Flow Bucket | Remembers a device you’ve chosen to trust, so you aren’t asked for a two-factor code every time | 30 days |
| Other cookies starting with better-auth. | Flow Bucket | Protect sign-in with Google or a passkey against forgery | A few minutes |
better-auth.admin_session | Flow Bucket | Set only in a Flow Bucket support person’s browser while they view an account as its user (the access the Privacy Policy describes), so they can return to their own session | Removed when they stop; at most 7 days |
better-auth.last_used_login_method | Flow Bucket | Remembers how you last signed in, to suggest it next time | 30 days |
4. Preference cookies
These remember choices you make in Flow Bucket.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
theme | Flow Bucket | Light or dark mode | 1 year |
sidebar_state | Flow Bucket | Whether the app sidebar is open or closed | 7 days |
5. Local storage
Flow Bucket also keeps a few things in your browser’s local storage. They stay on your device and aren’t sent to us:
- your light or dark mode setting; and
- the project you last opened in each account.
6. Third-party services
Some steps happen on other companies’ websites or in their embedded frames, which set their own cookies under their own policies: paying through Stripe, signing in with Google, and Cloudflare Turnstile’s checks on our sign-up, sign-in and password-reset forms. We don’t control those cookies.
7. Managing cookies in your browser
You can block or delete cookies in your browser settings. If you block essential cookies, you won’t be able to sign in to Flow Bucket.
8. Changes and contact
We’ll update this policy when the cookies we use change; the date at the top shows when it last changed. Questions? Email [email protected].