Cookie Policy

Last updated: 17 September 2026 · English

1. Who operates FrostDesk

FrostDesk is operated by ARMOFLOW LTD, company number 17081481, registered in England and Wales, with its registered office at 167–169 Great Portland Street, London, England, W1W 5PF, United Kingdom.

Contact hello@armoflow.com about privacy or cookies. Our Privacy Policy describes the wider processing of account, customer, booking and integration information.

2. Cookies and similar technologies

Cookies are small pieces of information stored by your browser and sent with relevant web requests. Local storage also keeps information on your device, but its contents are not automatically sent with each request. These technologies support sign-in, preferences, consent choices and optional usage measurement.

A cookie’s lifetime on your device is different from the time information is kept on a server. Expiry may be affected by subsequent visits, browser restrictions, your settings or deletion.

3. Purposes and consent choices

Authentication storage enables requested signed-in features. Consent storage records your tracking choices. Language, appearance and interface preferences help the website remember how you use it. Optional Analytics is a separate purpose.

FrostDesk uses iubenda to provide cookie choices on its main website and application. Use the banner or the “Cookie preferences” link in the footer to accept, reject or customise optional tracking. You can revisit that link to change your decision. Optional analytics is configured to load through the analytics consent category.

If the consent control is unavailable or reports an error, contact hello@armoflow.com. Your browser’s storage controls remain available. This standalone policy page does not load Analytics or the consent manager; return to the main website to use its privacy-preferences control.

4. FrostDesk storage

The names and periods below describe the application configuration. Actual names can contain the project identifier or numbered chunks. Provider-domain storage can also apply when you use an external sign-in or payment page.

Name / type	Purpose	Configured lifetime
`frostdesk_site_lang` FrostDesk cookie	Remembers the public website language.	365 days from the last write; visits to a language route can refresh it.
`sb-<project-ref>-auth-token`, including numbered chunks Supabase authentication cookies	Stores session information needed for signed-in features.	The installed SDK uses a default maximum age of 400 days. Token validity, refresh, sign-out and server settings separately determine whether a session remains usable.
`_iub_cs-*` iubenda consent cookie	Records privacy preferences for the consent manager.	Preference-cookie validity is configured as 365 days and may be refreshed on later visits. Browser restrictions or clearing storage can shorten it.
`frostdesk_instructor_theme` Local storage	Remembers the selected application theme.	No automatic expiry; kept until overwritten, removed or cleared.
`frostdesk_instructor_ui_lang` Local storage	Remembers the selected application language.	No automatic expiry; kept until overwritten, removed or cleared.
`frostdesk_inbox_day1_banner_dismissed` Local storage	Remembers dismissal of the introductory inbox notice.	No automatic expiry; kept until overwritten, removed or cleared.

5. Optional Google Analytics

Google Analytics 4 measures website usage, including pages and feature events, using technical and interaction information. FrostDesk configures its Analytics scripts to activate through the consent manager’s analytics category. Advertising storage and advertising-personalisation consent are configured as denied.

Cookie	Purpose	Default lifetime
`_ga`	Distinguishes browsers for measurement.	2 years, potentially refreshed by later writes.
`_ga_<identifier>`	Maintains Analytics session state.	2 years, potentially refreshed by later writes.

These are Google’s documented defaults; browser limits and provider settings may affect the actual duration. Google’s Privacy Policy describes its processing.

6. Payment, sign-in, maps and diagnostics

Stripe: When you open a payment or connected-account page, Stripe may use its own cookies and device information for payment, authentication and fraud prevention. Provider examples include __stripe_mid with a one-year lifetime and __stripe_sid with a 30-minute lifetime. These are examples for the relevant Stripe interfaces, not cookies set by every FrostDesk page. See Stripe’s cookie information.

Google sign-in: The provider’s account and authorisation pages may use their own cookies and settings. FrostDesk’s resulting session cookies are listed above.

Google Maps/Places: Using the meeting-point address-search field can load Google’s Places service and send the search text and connection information to Google. Its provider-domain storage and privacy information may apply.

Sentry, when configured: Error and performance monitoring can send diagnostic and technical event information. The instructor application is configured with session-replay sampling disabled. Diagnostics and performance requests are separate from session replay.

7. Managing your choices

Use the “Cookie preferences” link in the footer of the main website or application to change optional tracking choices. Withdrawal applies to future processing governed by that choice and does not undo processing that already occurred lawfully.

You can also remove or block cookies and local storage through your browser settings. Cookies already on your device may remain until they expire or you remove them. Clearing authentication storage can sign you out; clearing preferences can reset language, theme and consent choices. Blocking all storage can affect requested features.

If you use another browser or device, or clear your storage, you may need to make your choices again.

8. Updates and further information

We update this policy when relevant technologies or purposes change. See the Privacy Policy for recipients, international processing, retention criteria and your rights. Contact hello@armoflow.com for assistance.