Cookie Policy
1. Introduction
This Cookie Policy explains how Flob Inc. ("Company," "we," "us," or "our") uses cookies and similar tracking technologies when you visit or use our reOS platform ("Research Operating System") and related services (collectively, the "Service").
This policy should be read in conjunction with our Privacy Policy, which provides more information about how we collect and use personal data.
Essential and functional cookies — those strictly necessary for the Service to work correctly, such as authentication, security, and preference cookies — are used whenever you use the Service and cannot be switched off. Analytics and diagnostics cookies (and any advertising cookies we may introduce in the future) are used only with your consent, which you can give, refuse, or withdraw at any time through our cookie consent banner and settings, as described in Section 6.
We currently do not use any third-party advertising cookies or tracking pixels, and we do not use third-party marketing analytics services. The cookies we actually set are listed below.
2. What Are Cookies?
Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. Cookies are widely used to make websites work more efficiently, provide information to website owners, and enable certain features.
2.1 Types of Cookies by Duration
Session Cookies: These cookies are temporary and are deleted when you close your browser. They are used to maintain your session as you navigate the Service.
Persistent Cookies: These cookies remain on your device for a set period or until you delete them. They are used to remember your preferences and choices across visits.
2.2 Types of Cookies by Origin
First-Party Cookies: These cookies are set by us (the website you are visiting).
Third-Party Cookies: These cookies are set by third parties, such as security or diagnostics providers. We do not currently allow third-party advertising cookies.
3. How We Use Cookies
We use cookies and similar technologies for the following purposes:
3.1 Essential Cookies (Strictly Necessary)
These cookies are necessary for the Service to function and cannot be switched off. They are usually only set in response to actions made by you, such as logging in or setting your privacy preferences.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
better-auth.session_token | reOS | Authentication session | Session |
better-auth.session_data | reOS | Session data | Session |
oauth_state | reOS | Protects sign-in flows against cross-site request forgery | Duration of sign-in flow |
reos-cookie-consent | reOS | Stores your cookie preferences (browser local storage) | Until cleared |
__cf_bm | Cloudflare | Bot management and security | 30 minutes |
cf_clearance | Cloudflare | Security verification | 1 year |
Without these cookies:
- You would not be able to log in or stay logged in
- Your cookie preferences would not be remembered
- Security features would not function properly
3.2 Functional Cookies (Preferences)
These cookies enable the Service to provide enhanced functionality and personalization. Because they are needed for the Service to behave correctly (for example, to route your requests to the right data region and remember choices you have made), they are set as part of the Service's core operation and, like essential cookies, do not have a separate on/off toggle in the consent banner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
reos-theme | reOS | Remembers your theme preference (light/dark/system) | 1 year |
| Last-active-organization cookie | reOS | Remembers which organization you last worked in | Persistent |
| Region routing cookie | reOS | Routes your requests to your organization's data region | Persistent |
reos_ref | reOS | If you reached us through a personal invitation link we sent you, remembers the reference code in that link so that your sign-up can be recognised as coming from it. The code is a random string we generated; it holds no information about you and is not shared with anyone else | 90 days |
Without these cookies:
- Your theme preference would reset on each visit
- Interface and routing preferences would not be remembered
- A sign-up would not be recognised as coming from an invitation we sent you
3.3 Analytics and Diagnostics (Performance)
We do not currently use third-party product analytics or web analytics services (such as Google Analytics or PostHog), and no such cookies are set. We measure aggregate usage of the Service using first-party, privacy-preserving infrastructure (Cloudflare analytics), which does not build individual profiles.
With your consent, we use Sentry for error tracking and diagnostics:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Sentry session identifiers | Sentry | Correlating errors within a session for debugging | Session |
Sentry Error Tracking: When errors occur, Sentry automatically collects:
- Error messages and stack traces
- Browser and device information
- User actions leading to the error (session replay on errors; text inputs and sensitive fields are masked, and automated PII scrubbing is applied)
- Network request information and performance metrics
This data helps us quickly identify and fix bugs to improve your experience.
Without this:
- We would have difficulty identifying and fixing errors in the Service
3.4 Advertising Cookies (Marketing)
We do not currently set any advertising cookies or tracking pixels (such as Google Ads, Meta/Facebook Pixel, LinkedIn Insight Tag, or similar technologies).
If we introduce advertising technologies in the future, we will update this Cookie Policy first, and no advertising cookies will be placed until you have given your explicit consent through our cookie consent manager.
4. Third-Party Cookies
The only third parties that may set cookies or similar identifiers through the Service today are:
4.1 Cloudflare
Cloudflare may set cookies for:
- Security and bot protection
- Performance optimization
Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/ Cloudflare's cookie policy: https://www.cloudflare.com/cookie-policy/
4.2 Sentry
Sentry may set cookies or use browser storage for:
- Error tracking and monitoring
- Performance monitoring
- Session correlation for debugging
Sentry's privacy policy: https://sentry.io/privacy/
5. Similar Technologies
In addition to cookies, we may use other similar technologies:
5.1 Local Storage
We use browser local storage to store:
- User preferences
- Cookie consent preferences (
reos-cookie-consent) - Cached application data
Local storage data persists until explicitly cleared by you or the application.
5.2 Email Delivery Tracking
Emails sent through the Service (such as study invitations and notifications) may include standard delivery instrumentation so that we and the sender can detect bounces and delivery failures. We do not use email tracking for advertising.
5.3 JavaScript
Our Service uses JavaScript to enable interactivity. Disabling JavaScript will significantly impair the functionality of the Service.
6. Managing Cookies
You have several options for managing cookies:
6.1 Our Cookie Consent Banner
When you first visit the Service, you will see a cookie consent banner that allows you to:
- Accept All: Enable all cookie categories
- Reject All: Disable all non-essential cookies
- Customize: Choose which categories of cookies to enable
You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of the Service. Withdrawing consent is as easy as giving it.
6.2 Browser Settings
Most web browsers allow you to control cookies through their settings. You can typically:
- View what cookies are stored on your device
- Delete some or all cookies
- Block all cookies or certain types of cookies
- Set preferences for specific websites
Browser-specific instructions:
- Chrome: Settings > Privacy and security > Cookies
- Firefox: Settings > Privacy & Security > Cookies
- Safari: Preferences > Privacy > Cookies
- Edge: Settings > Cookies and site permissions
Note: Blocking or deleting cookies may impact the functionality of the Service. Essential cookies are required for the Service to function properly.
7. Do Not Track and Global Privacy Control
Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no common understanding of how to interpret DNT signals, the Service does not currently respond to DNT signals.
Because we do not sell personal information or share it for cross-context behavioral advertising, there is currently no sale or sharing for a Global Privacy Control (GPC) signal to opt you out of. We recommend using our cookie consent manager to control non-essential cookies on the Service.
8. Cookies on Mobile Devices
When you access the Service through a mobile browser, cookies function similarly to desktop browsers, and you can manage them through your mobile browser settings. We do not use mobile advertising identifiers (such as Apple's IDFA or Google's Advertising ID).
9. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, law, our business operations, or for other reasons. If we make material changes, we will notify you by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice on the Service
- Resetting cookie consent preferences (for significant changes, including any introduction of new non-essential cookie categories)
We encourage you to review this Cookie Policy periodically.
10. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us:
Flob Inc. 1111B S Governors Ave STE 49827 Dover, DE 19904 United States
Email: support [at] reos [dot] ai
11. Cookie Consent Record
When you provide consent for cookies through our consent banner, we maintain a record of:
- The date and time of your consent
- The categories of cookies you consented to
- The version of the cookie policy you agreed to
This record is retained for the duration of your cookie consent (typically 1 year) plus an additional period as required for legal compliance.
This Cookie Policy was last updated on July 8, 2026.