Cookie Policy
Last updated: October 29, 2026
A cookie is a small piece of text a website asks your browser to keep, so it can recognise you on your next visit. This page describes cookies and browser storage used by roadmap-flow.com. Optional website statistics are off until you press Accept. Rejecting them does not affect the public website or the app.
1. Who we are
roadmap-flow.com is run by Belfavn, a sole proprietorship, Rue de Bretagne 25, box 4, 1200 Woluwe-Saint-Lambert, Belgium, enterprise number 1035.683.549 ("Belfavn", "we", "us"). How we handle personal information in general is in our Privacy Policy.
2. Only what is strictly needed
The sign-in and security cookies in section 3 support the service you request. Optional Google Analytics cookies are separate: we ask first using equally prominent Accept and Reject buttons. No Google Analytics script, cookie or measurement request is loaded before you accept. We do not use these statistics for advertising.
3. The cookies we use
You only get the sign-in cookies if you sign in on the website. Browsing the public pages sets none of them.
| Name | What it is for | How long it lasts |
|---|---|---|
rf_session |
Keeps you signed in to your Roadmap Flow account on the website. | 1 hour, or until you sign out |
rf_refresh |
Renews that sign-in so you are not asked to sign in again every hour. It is only ever sent to the address that does the renewing. | 60 days, or until you sign out |
rf_company_session |
Keeps a company's owner or administrator signed in to the company console. | 12 hours, or until you sign out |
rf_admin_session |
Keeps Belfavn staff signed in to our own administration pages. It is never set for customers. | 8 hours, or until signing out |
__cf_bm (Cloudflare) |
Our hosting provider, Cloudflare, may set this to tell people apart from automated traffic and protect the site from attacks. It does not identify you. | Up to 30 minutes |
Our sign-in cookies cannot be read by scripts on the page and only travel over encrypted connections. They hold a random code, not your name or email address.
4. Optional website statistics and browser storage
If you accept, Google Analytics (Google Ireland Limited) receives page visits, traffic-source information, browser and device information, and clicks to the Microsoft Store or Chrome Web Store. Google processes connection information such as your IP address to provide the service. We do not send your roadmap contents, account details, form entries, site-search text, full link addresses or URL fragments. Page addresses exclude query strings; recognised campaign labels are used for marketing attribution.
This is limited to public website pages, including the Field Guide. The account, company, operator, sign-in and billing pages do not load it. The desktop app and Roadmap Flow Check do not use Google Analytics.
| Name | What it is for | How long it lasts |
|---|---|---|
_ga and _ga_KBMVTSCSJV | Google Analytics browser and session identifiers, only after acceptance. | Up to 180 days; not renewed on each page view by our configuration. |
rf_website_analytics_v1 (local storage) | Remembers your Accept or Reject choice and its date. It is not sent to Google. | Valid for 180 days, then we ask again; you may clear it in your browser. |
Choose Cookie settings in a public-page footer to change your answer. Rejecting stops further collection and removes the Analytics cookies available to this website. If Analytics was already running, the page reloads to unload it. Withdrawing consent does not erase information already received by Google; contact us about deletion. If your browser blocks local storage, your choice works for the current page but you may be asked again on the next page.
Google may process information outside the European Economic Area, including in the United States; see the Privacy Policy. Google signals and advertising personalisation are disabled. Event and user data retention in our Analytics property is set to two months; aggregate reports may remain available longer.
Company invitations
When you open a company invitation and need to sign in first, the invitation page keeps the invitation code in your browser's temporary storage for the tab, so you land back in the right place. It is deleted as soon as you join, and in any case when you close the tab.
5. Other companies' sites
When you sign in with Microsoft or Google, or pay through Stripe, you are briefly on their sites, and they may set their own cookies there under their own cookie policies. We do not control or receive those cookies.
6. The desktop app and the browser extension
The Roadmap Flow desktop app does not use cookies. It keeps your roadmaps in the folder you choose and, if you sign in, keeps you signed in on your own device. The Roadmap Flow Check browser extension sets no cookies and stores nothing beyond the open window.
7. Your choices
You can see and delete cookies in your browser's settings, and block them altogether. If you block ours, the public pages still work, but you will not be able to sign in on the website or use the company console. Signing out removes our sign-in cookies. Optional statistics can be rejected independently using Cookie settings.
8. Changes to this policy
If we change which cookies we use, we update this page and its "last updated" date. We will ask for your consent before using any cookie that is not strictly needed.
9. Contact
Questions about cookies: support@roadmap-flow.com.