Cookie Policy of www.wonderflow.ai

Welcome to the cookie policy of www.wonderflow.ai. This policy will help you understand what cookies and tracking technologies we use, how we use them and what your rights are in relation to it.

Latest update: August 06, 2026

Introduction

This document informs Users about the technologies that help this Application to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Application.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent, depending on the applicable law. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

This Application uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.

Owner and Data Controller

Wonderflow BV — Nieuwezijds Voorburgwal 296-298, 1012 RT Amsterdam, The Netherlands

Owner contact email: security@wonderflow.ai

How this Application uses Trackers

Necessary

This Application uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

Trackers managed by third parties

Google LLC

Google Tag Manager

Company: Google LLC +1

Place of processing: United States +1

Personal Data processed: Tracker +1

Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed:
  • Tracker
  • Usage Data
Service provided by:
Cloudflare, Inc.

Cloudflare

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through this Application, i.e., communication between this Application and the User's browser, while also allowing analytical data from this Application to be collected.

Personal Data processed:
  • Trackers
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Trackers duration:
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes
 HubSpot Germany GmbH

HubSpot CMS

Company: HubSpot Germany GmbH

Place of processing: Germany

Personal Data processed: Trackers +1

HubSpot CMS is a platform provided by HubSpot Germany GmbH that allows the Owner to build, run and host this Application.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • *_key: 14 days
  • __hmpl: duration of the session
  • __hs_cookie_cat_pref: 7 months
  • __hs_do_not_track: 7 months
  • __hs_gpc_banner_dismiss: 7 months
  • __hs_initial_opt_in: 7 days
  • __hs_notify_banner_dismiss: 7 months
  • __hs_opt_out: 7 months
  • __hsmem: 7 days
  • __hssc: 30 minutes
  • __hssrc: duration of the session
  • __hstc: 7 months
  • hs-membership-csrf: duration of the session
  • hs-messages-hide-welcome-message: 1 day
  • hs-messages-is-open: 30 minutes
  • hs.superstore.laboratory.*: 2 days
  • hs_ab_test: duration of the session
  • hublytics_events_53: duration of the session
  • hubspotutk: 7 months
OpenAI, L.L.C.

OpenAI API

Company: OpenAI, L.L.C.

Place of processing: United States

Personal Data processed: Trackers +1

The OpenAI API provided by OpenAI, L.L.C. is a service that helps the Owner to automate tasks through its AI engine.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:

Functionality

This Application uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.

Trackers managed by third parties

Google Ireland Limited

Google Workspace

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Data communicated while using the service +2

Google Workspace is an integrated suite of cloud-based productivity, collaboration and storage services provided by Google Ireland Limited. Gmail or other G Suite services are not scanned by Google for advertising purposes. In addition, Google does not collect or use data inside these services for advertising purposes in any other way.

Personal Data processed:
  • Data communicated while using the service
  • Trackers
  • Usage Data
Service provided by:
Auth0, Inc

Auth0

Company: Auth0, Inc

Place of processing: United States

Personal Data processed: email address +6

Auth0 is a registration and authentication service provided by Auth0, Inc. To simplify the registration and authentication process, Auth0 can make use of third-party identity providers and save the information on its platform.

Personal Data processed:
  • email address
  • first name
  • last name
  • password
  • picture
  • Trackers
  • various types of Data as specified in the privacy policy of the service
Service provided by:

Experience

This Application uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.

Trackers managed by third parties

Google Ireland Limited

YouTube Video Widget

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

YouTube is a video content visualization service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • PREF: 8 months
  • VISITOR_INFO1_LIVE: 8 months
  • VISITOR_PRIVACY_METADATA: 7 months
  • YSC: duration of the session
  • YtIdbMeta:databases: duration of the session
  • iU5q-!O9@$: indefinite
  • yt-player-headers-readable: duration of the session
  • yt-remote-cast-available: indefinite
  • yt-remote-cast-installed: indefinite
  • yt-remote-connected-devices: duration of the session
  • yt-remote-device-id: duration of the session
  • yt-remote-fast-check-period: indefinite
  • yt-remote-session-app: indefinite
  • yt-remote-session-name: indefinite
  • ytidb::LAST_RESULT_ENTRY_KEY: duration of the session

Measurement

This Application uses Trackers to measure traffic and analyze User behavior to improve the Service.

Trackers managed by third parties

Google Ireland Limited

Google Analytics (Universal Analytics)

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Tracker +1

Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

In order to understand Google's use of Data, consult Google's partner policy.

Personal Data processed:
  • Tracker
  • Usage Data
Service provided by:
Trackers duration:
  • AMP_TOKEN: 1 hour
  • _ga: 2 years
  • _gac*: 3 months
  • _gat: 1 minute
  • _gid: 1 day
Google Ireland Limited

Google Analytics 4

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: session statistics +2

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

In order to understand Google's use of Data, consult Google's partner policy.

Personal Data processed:
  • session statistics
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _ga: 2 years
  • _ga_*: 2 years
Google Ireland Limited

Google Analytics Advertising Reporting Features

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +2

Google Analytics on this Application has Advertising Reporting Features activated, which collects additional information from Google advertising cookies (web activity) and from device advertising IDs (app activity). It allows the Owner to analyze specific behavior and interests Data (traffic Data and Users' ads interaction Data) and, if enabled, demographic Data (information about the age and gender).

Users may manage their advertising preferences and disable advertising Cookies via Google Ad Settings. Please note that this may not prevent Users' devices from being identified on the basis of information transmitted automatically, such as their IP address.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • unique device identifiers for advertising (Google Advertiser ID or IDFA, for example)
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Trackers duration:
  • IDE: 2 years
  • _gcl_*: 3 months
  • test_cookie: 15 minutes
HubSpot, Inc.

HubSpot Analytics

Company: HubSpot, Inc.

Place of processing: Germany

Personal Data processed: Trackers +1

HubSpot Analytics is an analytics service provided by HubSpot, Inc.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • __hssc: 30 minutes
  • __hssrc: duration of the session
  • __hstc: 2 years
  • hublytics_events_53: duration of the session
  • hubspotutk: 2 years
  • messagesUtk: 2 years
MixPanel, Inc.

MixPanel

Company: MixPanel, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

MixPanel is an analytics service provided by Mixpanel Inc.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:

Marketing

This Application uses Trackers to deliver personalized ads or marketing content, and to measure their performance.

Trackers managed by third parties

LinkedIn Corporation

LinkedIn Website Retargeting

Company: LinkedIn Corporation

Place of processing: United States

Personal Data processed: Tracker +1

LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of this Application with the LinkedIn advertising network.

Personal Data processed:
  • Tracker
  • Usage Data
Service provided by:
Trackers duration:
  • AnalyticsSyncHistory: 1 month
  • JSESSIONID: duration of the session
  • UserMatchHistory: 1 month
  • bcookie: 1 year
  • bscookie: 1 year
  • lang: duration of the session
  • li_gc: 7 months
  • lidc: 1 day
  • lissc: 1 year
  • lms_ads: 1 month
  • lms_analytics: 1 month
  • sdui_ver: 1 day
Google Ireland Limited

Google Ads conversion tracking

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Application.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • IDE: 2 years
  • test_cookie: 15 minutes
X Corp.

X Ads conversion tracking

Company: X Corp.

Place of processing: United States

Personal Data processed: Trackers +1

X Ads conversion tracking is an analytics service provided by X Corp. that connects data from the X advertising network with actions performed on this Application.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • muc_ads: 2 years
  • personalization_id: 2 years
HubSpot, Inc.

HubSpot Email

Company: HubSpot, Inc.

Place of processing: Germany

Personal Data processed: email address +2

HubSpot Email is an email address management and message sending service provided by HubSpot, Inc.

Personal Data processed:
  • email address
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • hublytics_events_53: duration of the session
Mailgun Technologies, Inc.

Mailgun

Company: Mailgun Technologies, Inc.

Place of processing: United States

Personal Data processed: email address +2

Mailgun is an email address management and message sending service provided by Mailgun Technologies, Inc.

Personal Data processed:
  • email address
  • Trackers
  • Usage Data
Service provided by:
Intercom Inc.

Intercom

Company: Intercom Inc.

Place of processing: United States

Personal Data processed: email address +4

Intercom is an AI assistant platform provided by Intercom Inc. that enhances the capabilities of the support and communication channels available on this Application by making use of artificial intelligence techniques.

Personal Data processed:
  • email address
  • Trackers
  • Universally unique identifier (UUID)
  • Usage Data
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Trackers duration:
  • intercom-id-*: 10 months
  • intercom-session-*: 7 days
  • intercom-test: indefinite

How to manage preferences and provide or withdraw consent on this Application

Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on this Application.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

How to control or delete Cookies and similar technologies via your device settings

Users may use their own browser settings to:

  • See what Cookies or other similar technologies have been set on the device;
  • Block Cookies or similar technologies;
  • Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

Consequences of denying the use of Trackers

Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Application to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.