Essential session cookie
RepairFlow Web creates an HTTP-only session cookie after sign-in. This cookie is used to keep your account signed in, protect authenticated routes, and verify your shop role on the server. It is essential for the service and cannot be disabled without signing out.
- Name: __session, unless a different Firebase auth cookie name is configured.
- Purpose: authentication, route protection, and shop role verification.
- Duration: up to 5 days, or until sign out.
- Access: HTTP-only, so browser JavaScript cannot read it.
Security tokens
RepairFlow Web may request Firebase App Check or reCAPTCHA Enterprise tokens for selected signup and account-protection requests. These are used to reduce abuse and automated misuse of beta signup flows.
Preference storage
RepairFlow Web stores a few local preferences in your browser:
- sidebarOpen: remembers whether the dashboard sidebar is expanded or collapsed.
- repairflow.print.presets.v1: remembers receipt and label print preferences.
- repairflow:first-run-intake-banner-dismissed:*: remembers that a shop setup banner was dismissed for a shop.
- repairflow:web-activity:v1:*: when signed-in usage measurement is approved and enabled, remembers the last UTC day successfully recorded for the current account and shop. It reduces duplicate requests and is not used as authorization.
Analytics and tracking
RepairFlow does not install Vercel Web Analytics, Google Analytics for Firebase, advertising cookies, behavioral tracking cookies, session replay, click tracking, or marketing analytics pixels in this release. A disabled-by-default, first-party measure can record that an authenticated account used an operational Web page during a UTC day; it does not store the page, click, or browsing history.
This signed-in measurement remains disabled in an environment until its purpose, legal basis, retention handling, notices, and applicable consent requirements are approved. If consent or preferences controls are required, measurement remains disabled until those controls are available.
Managing storage
You can clear RepairFlow Web cookies and local storage through your browser settings. Clearing the session cookie signs you out. Clearing preference storage may reset layout, onboarding, or print preferences.