Last updated October 9, 2026
This Cookie Policy explains how Mobile Flow Ltd (“FaxFlow,” “we,” “us,” and “our”) uses cookies and similar technologies on www.fax-flow.com and our web app at app.fax-flow.com (together, the “Website”), what each one does, how long it lasts, and how you can control them. Our mobile apps use software tools (SDKs) rather than cookies; they are described in our Privacy Policy.
What are cookies?
Cookies are small data files placed on your device when you visit a website, along with similar technologies such as pixels and local storage. We use first-party cookies (set by FaxFlow) and a small number of third-party cookies (set by analytics and advertising providers) as described below.
The categories we use
- Strictly necessary — required for the site to function and to remember your privacy choices. Always on; cannot be switched off.
- Analytics — Google Analytics and Microsoft Clarity, so we can understand and improve how the site is used. In opt-in regions they stay off until you allow them; elsewhere they are on by default and you can switch them off at any time.
- Advertising & sale/share — Google advertising signals and ad-click measurement. Switching this off opts you out of any “sale” or “sharing” of your personal information for advertising and stops your data being used to personalize ads. Outside opt-in regions we may still measure which ads lead to sign-ups and purchases, without personalization; in opt-in regions these signals stay off until you allow them. On app.fax-flow.com, Google’s ad-personalization signals are always off.
We do not use cookies to run remarketing campaigns that show you ads because you visited our websites, and we do not build advertising audiences from the directory, health, benefits or tax pages you view.
Cookies and trackers on www.fax-flow.com
| Name | Provider | Category | Purpose | Duration | Type |
|---|---|---|---|---|---|
| ff_consent | FaxFlow (first-party) | Strictly necessary | Stores your cookie and privacy choices (which categories you allowed) so we can apply them on every visit. Set only after you use the consent controls; remembering a "reject" is itself necessary. | 12 months | HTTP cookie |
| ff_geo | FaxFlow (first-party) | Strictly necessary | A short-lived region hint ("opt-in" or "opt-out"), set by our server from your approximate country, so we show the right consent banner and defaults for your region. If your region is unknown, we treat you as being in an opt-in region. Does not identify you. | 1 day | HTTP cookie |
| _GRECAPTCHA | Google reCAPTCHA | Strictly necessary | Protects our contact form and live directory search from spam and abuse. Google’s Privacy Policy and Terms of Service apply. | Up to 6 months | HTTP cookie / local storage |
| _ga, _ga_* | Google Analytics (G-WCNN13QNB7) | Analytics | Distinguishes visitors and measures how the site is used (pages viewed, sessions). Google Signals is on for this Google Analytics property, which lets Google associate visits with signed-in Google accounts for aggregated reporting and, unless you turn off Advertising, for Google’s advertising services. | Up to 2 years | HTTP cookie |
| _clck, _clsk, CLID (and similar) | Microsoft Clarity (syei6hnkn3) | Analytics | Aggregated usage analytics and session replay/heatmaps to diagnose usability issues. Text and form inputs are masked. Loaded only while Analytics is on (on by default outside opt-in regions; off in opt-in regions until you allow it). Not loaded when your browser sends a Global Privacy Control signal or, outside opt-in regions, when you turn off “Advertising & sale/share” (Do Not Sell or Share); if you opt out during a visit, it is stopped and its cookies are cleared. | Session to 1 year | HTTP cookie / local storage |
| Vercel Web Analytics and Speed Insights | Vercel | Analytics | Counts page views and measures page speed without cookies or other identifiers stored on your device. | No cookies | Cookieless measurement |
| Google ad signals (ad_storage / ad_user_data / ad_personalization) | Advertising & sale/share | Advertising and measurement signals managed through Google Consent Mode v2. If you turn off Advertising, use “Do Not Sell or Share”, or send a Global Privacy Control signal, ad_personalization is set to denied so your visits are not used for personalized advertising. Outside opt-in regions, ad_storage and ad_user_data stay granted so ads can still be measured without personalization; in opt-in regions all three stay denied until you allow Advertising. | Follows your consent choice | Consent Mode signals |
Cookies and storage on app.fax-flow.com (web app)
| Name | Provider | Category | Purpose | Duration | Type |
|---|---|---|---|---|---|
| Firebase Authentication | Google Firebase | Strictly necessary | Keeps you signed in to your FaxFlow account. | Until you sign out | IndexedDB / local storage |
| Firebase App Check (reCAPTCHA v3) | Google Firebase / Google reCAPTCHA | Strictly necessary | Confirms that requests come from our real web app, to protect accounts and prevent abuse. | Up to 6 months | HTTP cookie / local storage |
| ff_consent, ff_consent_region | FaxFlow (first-party) | Strictly necessary | Remembers your privacy choices, including “Do Not Sell or Share”, and whether your region requires consent (stored only as “opt-in” or “opt-out”, worked out from your approximate location or browser language). | Until you clear them | Local storage |
| ff_handoff_intent and other session keys | FaxFlow (first-party) | Strictly necessary | Carries the fax you started on www.fax-flow.com into the web app and avoids counting the same visit twice. Removed when you close the tab. | Browser session | Session storage |
| Paddle checkout | Paddle.com (merchant of record) | Strictly necessary | Processes your payment and helps prevent fraud when you open the checkout. | Set by Paddle | HTTP cookie / local storage |
| ff_ad_click, ff_utm_touch | FaxFlow (first-party) | Advertising measurement | Remembers which ad or link brought you to FaxFlow (for example, Google’s gclid or Microsoft’s msclkid) so we can tell which ads lead to sign-ups and purchases. Not stored in opt-in regions until you allow Advertising. | 90 days | Local storage |
| _gcl_au, _gcl_aw, _gcl_ls | Google Ads (AW-11300792318) | Advertising measurement | Records the Google ad click that brought you to FaxFlow so we can measure which ads lead to purchases. Google’s ad-personalization signals are turned off on app.fax-flow.com, so these are not used to build remarketing audiences. | Up to 90 days | HTTP cookie / local storage |
| _ga, _ga_GF3S1937WB | Google Analytics (G-GF3S1937WB) | Analytics | Measures how the web app is used (pages viewed, sign-ups, checkout steps), in the same Google Analytics property as www.fax-flow.com and our mobile apps, so a visitor who moves from the website to the web app is recognized as the same user. For web-app visits, ad personalization and Google Signals are turned off, so they are not used to build advertising audiences. | Up to 2 years | HTTP cookie |
| _clck, _clsk, CLID (and similar) | Microsoft Clarity (rp9n1fsgms) | Analytics | Usage analytics and session replay to find and fix usability problems. Form inputs and document previews are masked. Started only while Analytics is on (on by default outside opt-in regions; off in opt-in regions until you allow it). Not started when your browser sends a Global Privacy Control signal or you opt out with “Do Not Sell or Share” (or, outside opt-in regions, turn off Advertising); an opt-out during a visit stops it and clears its cookies. | Session to 1 year | HTTP cookie / local storage |
Cookie names and exact lifetimes are set by the providers and may change; the list above reflects the trackers we currently use.
How can I control cookies?
On www.fax-flow.com you can change your choices at any time with Cookie Settings (also in the footer, next to “Do Not Sell or Share My Personal Information”). On app.fax-flow.com, use the “Your Privacy Choices” link (in the menu on a computer, at the bottom of the page on a phone) and then “Cookie and advertising preferences”; if you are signed in, go to Settings → Privacy. A choice you make in the web app before you sign in is saved to your account when you sign in. Strictly necessary cookies cannot be rejected because the site relies on them.
- In opt-in regions (the EEA, including Iceland, Liechtenstein and Norway, the UK, Switzerland, and Israel) analytics and advertising stay off until you click Accept; you can also Reject all or set each category individually. On www.fax-flow.com, if we cannot tell where you are, we apply these opt-in defaults.
- Elsewhere analytics and advertising may be on by default, but you can opt out at any time using the controls above.
- Global Privacy Control (GPC). If your browser sends a GPC signal, we automatically treat it as an opt-out of personalized advertising and of the sale/sharing of your personal information for that browser, in every region, without any action from you — and we display a confirmation that your opt-out has been honored. If you are signed in to our web app, we also save the opt-out to your account. Outside opt-in regions, basic conversion measurement may continue without personalization; in opt-in regions all advertising signals stay off. GPC also switches off Microsoft Clarity for that browser. It does not switch off Google Analytics, which you can turn off with the controls above.
Do Not Sell or Share My Personal Information
We share certain identifiers — a hashed copy of your email address, ad-click identifiers and cookie identifiers — together with information about your purchases and your activity on www.fax-flow.com, with Google so we can advertise our own products to existing or similar customers and measure our ads. Under the California Consumer Privacy Act and similar U.S. state laws, this may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not share the contents of your faxes, your fax recipients, or your fax history for advertising. You can opt out using the Cookie Settings controls (turn off “Advertising & sale/share”), via the “Do Not Sell or Share My Personal Information” link in our footer, with “Your Privacy Choices” in our web app, or by enabling Global Privacy Control in your browser.
A choice made on www.fax-flow.com is saved in your browser only, because you are not signed in there. To stop the sharing of your email address and purchase information for your account, also turn on “Do Not Sell or Share My Personal Information” in the FaxFlow app (Settings → Analytics) or in the web app (Settings → Privacy). See Your Privacy Choices in our Privacy Policy for full details.
Google’s advertising features and controls
We use Google Analytics advertising features (Google Signals) for www.fax-flow.com, and our Google Analytics property is linked to our Google Ads account. Third-party vendors, including Google, use cookies to measure ads and, where you have not opted out, to personalize ads. You can manage how Google uses your data in Google’s ad settings, opt out of Google Analytics with the Google Analytics opt-out browser add-on, and read how Google uses information from sites that use its services.
Managing cookies in your browser
You can also block or delete cookies through your browser settings:
Blocking strictly necessary cookies may stop parts of the Website from working.
Updates
We may update this Cookie Policy to reflect changes to the cookies we use or for legal/operational reasons. The date at the top shows when it was last updated.
Contact
Questions about cookies? Email support@fax-flow.com, or write to Mobile Flow Ltd, Kiryat HaMada St 20, Jerusalem, Israel 9777600.