Cookie Policy
Effective date: 21 April 2026
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and keep you logged in. Flow by NBS uses cookies strictly to keep the application secure and functional.
2. Cookies we set today
Flow currently sets only strictly necessary cookies. These cannot be disabled because the application will not function without them.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Supabase authentication — identifies your logged-in session | 1 hour |
| sb-refresh-token | Supabase authentication — refreshes your session without re-login | 7 days |
| flow_consent | Stores your cookie preference choices | 13 months |
| __cf_bm | Cloudflare bot management — protects against automated attacks (set by Cloudflare if applicable) | 30 minutes |
3. Cookie categories
We organise cookies into four categories. You can manage your preferences at any time.
Required for login, security, and to remember your settings. Flow won't work without these. Includes Supabase auth tokens and the consent cookie itself.
If enabled, these would help us understand how Flow is used so we can improve it. Measures feature usage and page views. No personal information is collected. We do not currently load any analytics cookies.
If enabled, these would help us find and fix errors and slow-loading pages. We do not currently load any performance cookies.
If enabled, these would be used to show you relevant updates about Flow. We don't sell or share data with advertisers. We do not currently load any marketing cookies.
4. How to manage your preferences
You can change your cookie preferences at any time using the button below, or by clicking "Cookie settings" in the site footer.
You can also clear cookies through your browser settings. Note that clearing the flow_consent cookie will cause the consent banner to reappear on your next visit.
5. Legal basis
Strictly necessary cookies are set under the legitimate-interest exemption recognised by the Nigeria Data Protection Act 2023 (NDPA) and the General Applications and Implementation Directive (GAID), Article 19. All other cookie categories require your explicit, opt-in consent — no pre-ticked boxes.
We comply with GAID Article 19 requirements: consent is freely given, specific, informed, and unambiguous. You may withdraw consent as easily as you gave it.
6. Third-party cookies
Flow does not currently set any third-party cookies. If we introduce third-party services in the future (e.g. analytics providers), this page will be updated and you will be re-prompted for consent.
7. Changes to this policy
If we change the categories or the cookies within them, we will increment the consent version. This automatically re-prompts all users for fresh consent, so your choices always reflect the current state.
8. Contact
For questions about this Cookie Policy, contact us at info@numerosolutions.com.ng.
See also our Privacy Policy and Terms of Service.