Cookie Policy
Last updated: October 4, 2026
A cookie is a small piece of text a website asks your browser to keep, so it can recognise you on your next visit. This page lists every one roadmap-flow.com uses, and the one other thing it keeps in your browser. The short version: we only use what is needed to sign you in and to protect the site — nothing that tracks you, measures you or shows you advertising.
1. Who we are
roadmap-flow.com is run by Belfavn, a sole proprietorship, Avenue de Calabre 33, box 12, 1200 Woluwe-Saint-Lambert, Belgium, enterprise number 1035.683.549 ("Belfavn", "we", "us"). How we handle personal information in general is in our Privacy Policy.
2. Only what is strictly needed
Every cookie below is needed for something you ask the site to do — sign in, use the company console — or to keep the site safe. The law allows these without asking first, so we do not show a cookie banner. We use no analytics, advertising or tracking cookies, and none from social networks. If that ever changes, we will update this page and ask for your consent before setting them.
3. The cookies we use
You only get the sign-in cookies if you sign in on the website. Browsing the public pages sets none of them.
| Name | What it is for | How long it lasts |
|---|---|---|
rf_session |
Keeps you signed in to your Roadmap Flow account on the website. | 1 hour, or until you sign out |
rf_refresh |
Renews that sign-in so you are not asked to sign in again every hour. It is only ever sent to the address that does the renewing. | 60 days, or until you sign out |
rf_company_session |
Keeps a company's owner or administrator signed in to the company console. | 12 hours, or until you sign out |
rf_admin_session |
Keeps Belfavn staff signed in to our own administration pages. It is never set for customers. | 8 hours, or until signing out |
__cf_bm (Cloudflare) |
Our hosting provider, Cloudflare, may set this to tell people apart from automated traffic and protect the site from attacks. It does not identify you. | Up to 30 minutes |
Our sign-in cookies cannot be read by scripts on the page and only travel over encrypted connections. They hold a random code, not your name or email address.
4. One other thing kept in your browser
When you open a company invitation and need to sign in first, the invitation page keeps the invitation code in your browser's temporary storage for the tab, so you land back in the right place. It is deleted as soon as you join, and in any case when you close the tab.
5. Other companies' sites
When you sign in with Microsoft or Google, or pay through Stripe, you are briefly on their sites, and they may set their own cookies there under their own cookie policies. We do not control or receive those cookies.
6. The desktop app and the browser extension
The Roadmap Flow desktop app does not use cookies. It keeps your roadmaps in the folder you choose and, if you sign in, keeps you signed in on your own device. The Roadmap Flow Check browser extension sets no cookies and stores nothing beyond the open window.
7. Your choices
You can see and delete cookies in your browser's settings, and block them altogether. If you block ours, the public pages still work, but you will not be able to sign in on the website or use the company console. Signing out removes our sign-in cookies.
8. Changes to this policy
If we change which cookies we use, we update this page and its "last updated" date. We will ask for your consent before using any cookie that is not strictly needed.
9. Contact
Questions about cookies: [email protected].