Cookie Policy
Last updated: 25 September 2026
About this policy
Flenno is operated by Tmi Lauri Koskensalo, Business ID 3361714-6, Viholankatu 12 A 16, 37120 Nokia, Finland. Contact: info@flenno.com.
This Cookie Policy explains cookies and similar browser storage on flenno.com and the functional storage used when accessing the Flenno application. It supplements our Privacy Policy: https://flenno.com/privacy-policy.
Cookies and similar technologies
Cookies are small records stored in your browser. Some support the service you request; others recognise your browser or help measure website activity. First-party cookies are associated with the site you visit. Third-party cookies are associated with another provider's domain.
Session cookies normally last for the browser session, although browser session-restoration settings can affect this. Persistent cookies have an expiry time and may be renewed on a later visit. Local storage can remain until removed by the site or cleared in your browser. Session storage normally lasts for the browser-tab session.
Cookie expiry is different from deletion of information already received by Flenno or a service provider.
Your choices
Our website provides a cookie banner through Framer. You can accept optional cookies, reject optional cookies, or customise your choices. Reopen the cookie settings using the cookie control in the website footer.
Optional website analytics, visitor identification and advertising-related tracking require your prior consent. A lack of consent must not be treated as permission to run the same optional tracking without cookies. You can use the public website without agreeing to optional tracking.
Strictly necessary storage supports functions such as security, authentication when requested and remembering your privacy choices. It is used under the applicable exemption for storage necessary to provide a service you request. Where personal information is involved, the relevant legal bases are explained in our Privacy Policy. A legitimate interest does not by itself replace consent where cookie rules require it.
You can change or withdraw consent through the cookie controls at any time. Withdrawal applies to future optional processing and does not affect processing that was lawful before withdrawal. Browser settings also let you remove existing cookies and other site storage. Blocking necessary storage can prevent sign-in or other requested features; clearing the consent record can cause the banner to appear again.
Website services
Framer
Framer hosts our public website and provides the cookie-banner functionality used on it. Its built-in website analytics is documented as using no cookies or persistent visitor identifiers. This is separate from the optional third-party tools below. Framer may also use necessary security mechanisms to protect its hosting service.
More information:
https://www.framer.com/help/articles/gdpr-and-cookies/
Google Analytics
With your consent, we use Google Analytics to understand visits, traffic sources, page use and website performance. It can process browser identifiers, device and browser information, visited pages and interaction events. We do not describe all website analytics as anonymous.
Website Google Analytics is separate from the Google Analytics properties that customers connect to the Flenno application.
More information:
https://support.google.com/analytics/answer/11397207
https://policies.google.com/privacy
Leadfeeder
With your consent, we use Leadfeeder to identify organisations visiting our website and understand business interest. It can process IP addresses, browser identifiers, visited pages, visit times and referral or campaign information. Company identification does not mean that all underlying information is anonymous.
More information:
https://help.leadfeeder.com/en/articles/13922333-web-visitors-tracker-data-processing-roles
Microsoft Clarity
With your consent, we use Microsoft Clarity for behavioural measurements, heatmaps and session replay to understand interactions with the public website and improve usability.
Microsoft acts as an independent controller for the information it receives. Its terms allow use for its own services and advertising, and the use of non-personal information for research and development, including AI model development. These purposes are relevant to your decision whether to allow Clarity.
More information:
https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-cookies
https://privacy.microsoft.com/en-us/privacystatement
Browser-storage names and lifetimes
The entries below identify the main storage associated with our website tools. Lifetimes for third-party measurement tools are provider-documented defaults, rather than a guarantee that every browser retains an entry for that long. Browser restrictions, provider updates and configuration can change the actual lifetime. Some entries are used only when the relevant feature and consent settings permit them. Persistent measurement cookies may be renewed on subsequent visits.
Website consent settings
framerCookiesConsentMode: local storage used by the Framer banner to remember permitted categories.
framerCookiesDismissed: local storage used to remember that the banner has been dealt with.
framerCookiesAutoAccepted: a banner-state entry used where the banner's regional configuration applies it.
These banner records have no fixed automatic expiry. They remain until updated or removed by the site or cleared from the browser.
Google Analytics
_ga: recognises a browser for visitor measurement. Default expiry: two years.
ga: maintains analytics session state. Default expiry: two years.
Google allows these periods and renewal behaviour to be configured. Cookie duration does not determine the length of an analytics session or the retention of server-side reports.
Leadfeeder
_lfa: recognises repeat browser visits. Default expiry: one year.
_lfa_consent: remembers the Leadfeeder consent state when that integration is enabled. Default expiry: two years.
_lfa_test_cookie_stored: checks whether cookie storage works. Expires immediately after the check.
_lfa_expiry: local-storage expiry information associated with the Leadfeeder client identifier. Documented duration: two years.
Microsoft Clarity
_clck: maintains the site's Clarity browser identifier and preferences. Standard expiry: 365 days.
_clsk: connects page views to a Clarity session. Standard expiry: one day.
_cltk: a tab identifier in session storage; normally lasts for the browser-tab session.
Microsoft's cookie documentation also describes provider-domain cookies used for identification, consent and related functions. Their availability depends on the service configuration, consent and browser restrictions; the provider documentation is not a statement that every listed Microsoft cookie is present on flenno.com.
Storage used in the Flenno application
When you sign in, WorkOS authentication uses secure session mechanisms. Their validity follows the applicable session and security settings; an authentication session can end before a browser-held record expires.
The application also uses limited functional storage:
sidebar_state: remembers whether the sidebar is open or collapsed. Cookie lifetime: seven days from the latest update.
flenno:ai-disclosure-hidden:: a local-storage flag remembering that the user dismissed the AI information banner. It has no fixed automatic expiry and remains until removed or browser storage is cleared. Hiding this notice is not consent to model training or unrelated data use.
integrations.activation: session storage used to complete a Google integration connection or reconnection. It is removed when consumed and otherwise normally lasts for the browser-tab session.
These application functions are separate from public-website measurement. Website tracking does not capture authenticated customer content, OAuth credentials, imported customer reports or AI conversations. Customer Google API data is not supplied to website trackers for advertising.
Information received by providers
Cookie identifiers, IP addresses and browsing information can be personal data. The providers above receive information needed for the described services, and Microsoft also has the independent purposes explained above. Processing may involve locations outside the European Economic Area, including the United States. Our Privacy Policy explains international-transfer safeguards and how to request further information.
Browser-storage lifetimes in this policy do not set retention periods for analytics reports or session recordings already collected by a provider. That information is handled under the applicable service settings, provider terms and our Privacy Policy. The application's database, backup and security-log periods do not apply automatically to public-website analytics.
For questions about cookies, consent or deletion of personal information, contact info@flenno.com. Your data-protection rights and complaint options are explained in our Privacy Policy.
Changes
We update this policy when our use of cookies or similar technologies changes and show the latest revision date above. A new optional purpose requiring consent will be presented before that processing begins. Continuing to browse the website is not, by itself, consent to optional tracking.