Cookie and Browser Storage Policy

This policy covers information stored on or read from a browser or device when you use the Service. The term cookies includes comparable browser storage where the same legal rules apply.

• Authentication and security: Firebase authentication state, App Check/reCAPTCHA tokens, session identifiers, impersonation safety state, and anti-abuse signals used to sign users in and protect requests.
• Language and accessibility: the caseflow-locale cookie and local language, theme, and text-size preferences. The locale cookie lasts up to one year; local preferences remain until cleared or replaced.
• Workspace operation: table settings, draft UI state, selected records, navigation state, timer state, document-editor state, and limited local record caches needed for requested features.
• Installable app: service workers, Cache Storage, and cached application assets used for installation, updates, performance, and limited offline-tolerant shell behavior.
• Device permissions: browser-controlled camera, microphone, notification, and file permissions are requested only when you activate the related scanning, voice, upload, or notification feature.

Firebase and Google reCAPTCHA/App Check may store or read identifiers and security signals. Stripe may use its own necessary storage on hosted checkout or billing pages. Connected providers may use storage on their own pages during OAuth or payment flows. Their policies apply on those pages.

Caseflow offers optional Google Analytics measurement to understand website visits, navigation, referrers, approximate region, browser and device categories, and aggregate interaction patterns. Analytics is disabled until you choose Accept analytics. Caseflow does not send account identifiers, case content, document content, contact details, or advertising identifiers through this integration, and it does not use Google Analytics for cross-site behavioral advertising. Google may set first-party analytics cookies after consent. You can withdraw consent at any time through Cookie settings; withdrawal disables measurement and removes accessible Google Analytics cookies from this site.

Necessary storage is used to transmit communications or provide the digital service you expressly request and, where personal data is involved, to perform the contract or pursue security and reliability interests. Non-essential storage requires consent where applicable and must not be set before consent.

• Use Cookie settings to accept or reject optional analytics and to change your choice later.
• Use browser controls to inspect or delete cookies, site data, local storage, service workers, and permissions.
• Sign out before using a shared device. Clearing authentication storage may sign you out; clearing preferences resets the interface.
• Blocking necessary storage may prevent sign-in, security checks, uploads, notifications, or installable-app behavior.
• Withdraw a device permission in browser or operating-system settings at any time.

We update this policy when storage technology or purposes change. For questions, use the public Support page or in-app Support Center.

Caseflow public contact: info@caseflow.my.