Legal
Cookie Policy
Last updated: March 10, 2026
1. About This Policy
Flowstep OÜ ("the Company," "we," "us," or "our") uses cookies and similar technologies on flowstepai.org. This Cookie Policy explains what we use, why, and what choices you have. It supplements our Privacy Policy. Flowstep is used by product designers and design system teams; cookies help us maintain your session, remember workflow preferences, and (only with your consent) measure how the brief-to-screen generation feature is used so we can improve it.
2. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, store preferences, and measure usage. We also use related technologies such as local storage (for example, to record your cookie consent decision).
3. Your Consent
Under the ePrivacy Directive and GDPR, we do not set non-essential cookies (analytics, preferences) until you give your prior consent through our cookie banner. When you first visit flowstepai.org you will see a banner with two equal options: you can accept non-essential cookies or decline them. Either choice is final until you change it.
You can withdraw or change your consent at any time by clicking "Cookie preferences" in the footer, which reopens the banner and lets you make a new choice. You may also clear your stored decision by deleting cookies in your browser settings.
Strictly necessary cookies do not require consent. They are the minimum required for the Service to operate.
4. Categories of Cookies We Use
| Category | Examples | Lifetime | Legal basis |
|---|---|---|---|
| Strictly necessary | session token, CSRF token, cookie-consent record (local storage) | session - 12 months | Legitimate interest / contract performance |
| Preferences | theme preference, connected design system configuration | up to 12 months | Consent (set only after you accept) |
| Analytics | anonymised usage analytics, brief-generation session data | up to 13 months | Consent (set only after you accept) |
| Marketing | not currently used | -- | Consent (not active) |
5. Third-Party Cookies
Some cookies may be set by third parties acting as our processors (for example, analytics providers). We have data-processing agreements with such providers under Article 28 GDPR and only enable their cookies after you give consent. We do not permit third-party providers to use data collected through flowstepai.org for their own advertising purposes.
6. Managing Cookies
- Use our cookie banner to accept or decline non-essential cookies. Click "Cookie preferences" in the footer at any time to reopen the banner and change your choice.
- Browser settings allow you to block or delete cookies; instructions are available at aboutcookies.org. Note that blocking strictly necessary cookies will affect session management and core Service functionality.
- Browser-transmitted opt-out signals (for example, the Global Privacy Control) are honoured for analytics and marketing categories, regardless of any prior consent record.
7. Changes
If we change the cookies we use in a material way we will update this policy and, where required under the ePrivacy Directive or GDPR, request renewed consent.
8. Contact
Flowstep OÜTartu maantee 25, Floor 4, 10151 Tallinn, Estonia
Email: [email protected]