Cookie Policy
Last updated September 10, 2026
What this page lists
Every cookie ArquiFlow can set is named below, with what it is for, which category it belongs to, how long it lasts and who sets it. Nothing that is not on this list is stored on your device by this site.
Only the analytics category is a choice. The essential cookies are what make signing in and remembering your language work at all, so they are not offered as an option — they are disclosed here instead. You can change the analytics choice at any time from the cookie settings at the foot of this page.
Essential cookies
| Cookie | Purpose | Lifetime | Party |
|---|---|---|---|
| at | Your access token — what keeps you signed in. Not readable by scripts. | Session | First-party |
| rt | Your refresh token — what renews the access token without asking you to sign in again. Not readable by scripts. | Session | First-party |
| NEXT_LOCALE | The language you chose, so the site keeps speaking it. | 1 year | First-party |
| cookie_consent | This decision itself: which categories you allowed, and when. Without it you would be asked on every page. | 180 days | First-party |
| g_state | Guards the Google sign-in round trip against a forged callback. Set only if you use Google sign-in. | 15 minutes | First-party |
| g_nonce | Binds Google’s reply to the request that started it. Set only if you use Google sign-in. | 15 minutes | First-party |
| g_next | Where to send you after Google sign-in finishes. Set only if you use Google sign-in. | 15 minutes | First-party |
The three `g_` cookies are scoped to the `/api/auth/google` path and are gone within fifteen minutes. They exist for the length of one sign-in and no longer.
Analytics cookies — the one thing you decide
| Cookie | Purpose | Lifetime | Party |
|---|---|---|---|
| _ga | Google Analytics 4: tells one returning browser from another so visit counts are not inflated. | 2 years | First-party |
| _ga_DK8S1Y2D6N | Google Analytics 4: the same, for this specific property. | 2 years | First-party |
Both are set by the Google Analytics 4 tag, and the tag loads only when three things are true together: you have allowed analytics, you are on a public page rather than inside the studio, and the site is being served from its production domain.
If you refuse analytics, these two are never set at all. That is stronger than a cookieless mode: no script loads, so no request reaches Google and there is nothing to store. Inside the studio the tag never loads either, whatever you allowed — the addresses of your projects and actas are not sent anywhere.
There is no advertising category, because there is nothing in it
The analytics tag is started with advertising storage, advertising user data and ad personalisation all denied outright. No advertising or profiling cookie is set by this site, so the consent record keeps a `marketing` field that is always false and the settings dialog offers no switch for it. A switch that controlled nothing would be the misleading thing to show.
Paddle, on the pricing page
The pricing page loads Paddle.js from Paddle, the merchant of record that sells the subscriptions, so that prices can be shown in your own currency and a checkout can be opened. Paddle determines your country from your IP address to do it, and may set its own cookies on that page under its own policy.
This script is treated as strictly necessary and is not gated behind consent: showing you a price is the thing you asked for by opening the page. It is disclosed here and in the privacy policy rather than hidden behind a toggle.
No cookie is shared across subdomains
None of the cookies above sets a `Domain` attribute. Every one is therefore host-only: it is sent back to the exact host that set it and to nothing else, and no subdomain of this site can read another’s.
Changing your mind, and clearing what is stored
The cookie settings control at the foot of every page in this section reopens the choice, and saving it takes effect immediately — refusing analytics after having allowed it stops the tag on the spot.
Your browser can also clear or block cookies for this site. Blocking the essential ones will stop sign-in from working. Anything else about this page can go to architectureminutes@gmail.com.