This installation of Journey Lanes is run by Developerlab. It uses only what it needs to work. There are no tracking, advertising or analytics cookies, and nothing is loaded from other websites while you browse the site and the app: fonts and images are served by Journey Lanes itself. One exception: the checkout loads Mollie’s card fields from js.mollie.com when you open it. Mollie receives your IP address and browser details when that happens. Because everything below is strictly necessary, the law doesn’t require your consent for it, and there is no cookie banner.
Cookies
| Name | Set by | Purpose | Expires |
|---|---|---|---|
__Host-fc_session | Journey Lanes | Keeps you signed in. Its prefix makes browsers accept it only from this exact address, over HTTPS. A random token that can’t be read by scripts (http-only), is only sent over HTTPS, and isn’t sent along with requests started by other websites (SameSite=Lax). | 14 days after you last used it (at most 30 days after signing in), or when you sign out |
__Host-fc_device | Journey Lanes | Security: keeps a locked account usable from your own browser. After too many wrong passwords for an account, signing in to it is paused, but a browser that signed in to that account before still gets in. It holds a random id with a signature tied to your account; nothing about it is stored on our side. Strictly necessary, so no consent is needed. Like the session cookie: this exact address only, HTTPS only, not readable by scripts, SameSite=Lax. | 1 year after you last signed in with this browser; it stays when you sign out, so the browser is still recognised. Delete it in your browser’s settings at any time. |
__Host-fc_signin | Journey Lanes | Security: ties the second sign-in step (the code we email you, or the one from your authenticator app) to the browser where you entered your password, so it works only there. A random value; we keep only its hash. Strictly necessary, so no consent is needed. This exact address only, HTTPS only, not readable by scripts. | 10 minutes, or as soon as you’ve entered the code |
__Host-fc_sso | Journey Lanes | Security: only while you sign in through your organization's identity provider. Ties the answer coming back from it to the browser that started the sign-in, so it can't be used in another. A random value; we keep only its hash. Strictly necessary. Because a SAML identity provider posts its answer from its own site, it is sent with that one request (SameSite=None); it stays HTTPS only, this exact address only, and not readable by scripts. | 10 minutes, or as soon as the sign-in finishes |
__Host-fc_trusted | Journey Lanes | Only when you tick “Trust this browser”: lets this browser skip the sign-in code. A random token; we keep its hash with the browser’s family (such as “Safari”) and when it was last used, so you can see and forget it under account menu → Your data. This exact address only, HTTPS only, not readable by scripts. | 30 days; earlier when you forget trusted browsers, change or reset your password, or ask to delete your account |
Stored in your browser by the app
The app remembers a few choices in your browser’s local storage. They stay on your device and are never sent anywhere. Copied steps contain whatever those steps hold, which can include test data. Signing out clears them.
| Key | What it remembers |
|---|---|
fc:project | The project you had open |
fc:env:<project> | The environment you picked per project |
fc:panels | Which panels are open |
flow-creator:copied-steps | Steps you copied, so you can paste them into another flow |
You can clear them at any time in your browser’s settings; the app then starts with its defaults.
During payment
When you pay, the card fields in the checkout are served by Mollie, paying with a bank takes you to your bank, and “Other ways to pay” (such as Apple Pay or Google Pay) takes you to Mollie’s payment page. Mollie and your bank may use cookies of their own there, for payment security and fraud prevention. Their policies apply: see Mollie’s privacy statement.
Questions
Write to privacy@journeylanes.com. More about how personal data is handled is in the privacy policy.