Cookie Policy
Last updated: April 14, 2026
1. What is a cookie?
A cookie is a small text file placed by a website on a user's browser. It may contain a technical identifier, a preference or session information. Some cookies are strictly necessary to operate a service, others are used for audience measurement, advertising or behavioural tracking.
2. Strictly necessary cookies (no consent required)
These cookies are essential for the provision of the Service and do not require prior consent (Art. 45c TCA for Switzerland; Art. 5 §3 of Directive 2002/58/EC for the EU).
| Name | Duration | Domain | Purpose |
|---|---|---|---|
| ark.flow session | Session | *.arkflow.ch | Authentication to the Customer Instance (post-signup) |
| CSRF token (HMAC) | Session | *.arkflow.ch | Protection against CSRF attacks |
3. Local preferences (localStorage, not cookies)
The arkflow.ch site uses the browser's local storage (localStorage, which is not a cookie and is never transmitted to the server) to remember:
- Theme preference (light / dark / automatic).
- Current signup wizard state, to allow the user to resume signup after intermediate navigation.
This information stays exclusively on the user's device and can be cleared at any time from the browser settings.
4. Payment cookies (Stripe)
When the Customer accesses the payment flow, Stripe may set fraud prevention cookies. They are necessary for performance of the contract.
| Name | Duration | Placed by | Purpose |
|---|---|---|---|
| __stripe_mid | 1 year | Stripe Payments Europe Ltd. | Fraud detection |
| __stripe_sid | 30 minutes | Stripe Payments Europe Ltd. | Fraud detection |
Legal basis: performance of the contract (Art. 6 §1 lit. b GDPR) and legitimate interest in payment security (Art. 31 §1 FADP).
5. Umami analytics (cookieless)
ark.swiss sàrl uses Umami, self-hosted on analytics.ark.swiss, to measure site audience. Umami does not set any cookies. It identifies visits via an anonymous hash computed from the IP address, user agent and current date; this hash is purged nightly. No personal data within the meaning of FADP/GDPR is retained. No consent is required.
6. No third-party commercial cookies
ark.swiss sàrl expressly declares that it does not use any of the following services: Google Analytics, Google Tag Manager, Meta Pixel (Facebook), LinkedIn Insight Tag, Hotjar, Intercom, Tawk.to, Crazy Egg, Mixpanel, Segment. No advertising tracker or retargeting pixel is present on arkflow.ch.
7. Browser cookie management
Every browser allows you to block or delete cookies via its settings:
Note: blocking strictly necessary cookies makes the Service unusable after signup.
8. Policy updates
This policy is updated upon technical changes. Any material change is signalled on the website.
9. Contact
In case of discrepancy between language versions, the French version prevails.