Cookie Policy
What we store in your browser, why, and how to change your mind.
Last updated: 21 July 2026
1. What cookies are
Cookies are small text files a website stores in your browser so it can recognise you between pages and visits. We also use similar browser storage, such as localStorage, which works the same way but never leaves your device. This policy covers both, and lists everything Storeflit actually uses.
Storeflit is run by Erys AI Ltd, registered in England and Wales, company number 15781123. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
2. What this website uses
The website you are reading now, storeflit.com, sets one strictly necessary cookie, storeflit_consent, to remember the choice you make in the consent banner. With your permission it also uses Google Analytics; the _ga cookies described below are set only after you choose Accept all. Until then, nothing loads and nothing is sent to Google.
3. What the app uses
The Storeflit application at app.storeflit.com uses the cookies and browser storage below; this website uses the consent and analytics entries only. Strictly necessary cookies are needed for things to work, such as signing you in or remembering your consent choice; they do not need consent. Analytics cookies are set only if you choose Accept all in the banner.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| storeflit_consent | Remembers the cookie choice you make in the consent banner. | Strictly necessary | 12 months |
| next-auth.session-token | Keeps you signed in to your account. | Strictly necessary | Up to 30 days |
| next-auth.csrf-token, next-auth.callback-url | Protect the sign-in flow against forged requests. | Strictly necessary | Session |
| _ga | Google Analytics (Google LLC): distinguishes visitors. Set only with your consent. | Analytics | Up to 2 years |
| _ga_* | Google Analytics (Google LLC): keeps session state. Set only with your consent. | Analytics | Up to 2 years |
| migration-storage | Saves your migration wizard progress in your browser. localStorage, not a cookie. | Functional | Until you clear browser data |
On secure connections the sign-in cookies carry a __Secure- or __Host- prefix in your browser's cookie list.
4. Analytics only with your consent
On this website and in the app, Google Analytics does not load until you choose Accept all, so no _ga cookies exist before then. If you later switch to Essential only via a Cookie preferences link, we delete the _ga cookies and disable collection immediately; no further data is sent to Google from your browser. Each domain asks for and stores your choice separately.
5. Changing your choice
- On this site and in the app: use the Cookie preferences link in the footer of any page to reopen the banner and change your choice. Your choice is stored for 12 months, then we ask again.
- In your browser: every major browser lets you block or delete cookies in its settings, per site or entirely. Blocking the strictly necessary cookies will stop sign-in from working.
Questions about cookies? Contact us through the in-app support system or at privacy@erys.ai. See also our Privacy Policy.
This document is provided for information; it is not legal advice to you.