Cookie Policy

Effective date: 07.06.2026
Company: Flameplace LTD, VAT BG200803111, Atanas Ishirkov str., 11 office 6, Sofia 1000, Bulgaria
Contact: info@flameplace.com

This Cookie Policy explains how Flameplace uses cookies, local storage, session storage and similar technologies on the Flameplace platform. It should be read together with the Privacy Policy and Terms of Use.

The production Flameplace domain is https://flameplace.com.

1. What cookies and similar technologies are

Cookies are small text files stored by your browser. Similar technologies include local storage, session storage, pixels, SDKs, embedded media scripts, service workers and browser push tokens.

Some technologies are necessary for the service to work. Others are optional and are used only if you consent.

2. Consent model

Flameplace uses a first-party consent preference cookie named flameplace_cookie_consent. It stores your choices for optional categories for approximately 6 months.

Optional categories are disabled by default. You can accept all, reject optional technologies or customize your choices. If your browser sends a Global Privacy Control signal, optional categories remain disabled unless you make an explicit choice.

Flameplace does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are used under California privacy law. Analytics and measurement technologies are optional and controllable.

3. Strictly necessary technologies

These technologies are used without optional consent because they are required to provide security, authentication, routing, preference handling or requested service functions.

Technology Purpose Typical duration
Laravel session cookie Maintains your session, login state and service security. Session lifetime configured by Flameplace, currently typically 120 minutes of inactivity.
XSRF / CSRF token Protects forms and authenticated requests against cross-site request forgery. Session / browser controlled.
laravel_maintenance Allows access through Laravel maintenance mode when a valid maintenance secret is used. Up to 12 hours when used.
appinstalled Remembers that the iOS PWA install prompt was dismissed. Approximately 30 days.
Local/session storage for UI state Stores theme/sidebar/interface state such as _x_theme_mode and isSidebarExpanded. Until cleared by the browser or the current session ends.
Laravel Echo / WebSocket connection Supports real-time in-product updates, notifications and messaging. Active while the page/session is active.

4. Analytics category

When you enable analytics, Flameplace may load analytics tools to understand product usage, clicks, link tracking and service performance.

Provider: Yandex Metrika (mc.yandex.ru), including Webvisor where enabled in the production counter.
Status: optional, loaded only after analytics consent. The final production configuration, retention settings and Webvisor use have been confirmed for this Cookie Policy.

Provider: Google Analytics (googletagmanager.com, google-analytics.com) if a production measurement ID is configured.
Status: optional, loaded only after analytics consent. The final production configuration and retention settings have been confirmed for this Cookie Policy.

5. External media category

When you enable external media, Flameplace may load embedded videos and media SDKs, including Cloudflare Stream.

Provider: Cloudflare Stream (customer-*.cloudflarestream.com, embed.cloudflarestream.com).
Status: optional. Flameplace shows a first-party poster image and play control before loading the external iframe. The Cloudflare Stream iframe loads only after the user chooses to play the video or otherwise enables external media.

6. Notifications category

When you enable notifications, Flameplace may ask your browser's permission to send you push notifications, for example about new messages or finished AI generations. This uses your browser's own built-in push service, addressed with Flameplace's own signing key (VAPID). No third-party push notification provider is used, and no data is shared with one for this purpose. Your browser stores a push subscription (an address and two keys) that Flameplace uses only to deliver these notifications; you can revoke it at any time from your browser's site settings.

7. Other third-party resources

Flameplace may load third-party resources such as Google Fonts, cdnjs, jsdelivr, Pusher-compatible WebSocket infrastructure and Cloudflare-hosted assets. Some are necessary for presentation or service operation; others are controlled by the categories above where they involve optional tracking or embedded media.

The production vendor list and cookie scan have been confirmed for this Cookie Policy. Flameplace will review this list when production vendors, scripts or storage technologies change.

8. How to change your choices

You can reopen Cookie settings from the website footer. You can also clear cookies and local storage in your browser.

9. Legal notes for EU and California users

EU/EEA users: optional cookies and similar technologies are based on consent where required by GDPR/ePrivacy rules.

California users: Flameplace does not sell or share personal information for cross-context behavioral advertising. Where applicable, optional analytics choices and Global Privacy Control are treated as privacy safeguards.