Right HandThe short version: Right Hand uses only the cookies and browser storage it needs to work: keeping you signed in, keeping you safe, and remembering small choices like dark mode. No advertising cookies, no tracking pixels, no selling. Our visit counts don't use cookies at all.
This notice explains the cookies and similar tools used on the Right Hand website, dashboard, iPhone app, and the quote, portal and payment pages a company sends its clients. It is part of our Privacy Policy. Right Hand is operated by Revive Flow LLC, doing business as Right Hand.
1. What cookies are
A cookie is a small file a website stores in your browser. "Local storage" is a similar tool that keeps small settings on your device. Both can be "essential" (the site breaks without them) or used for other things like analytics or advertising.
2. What we use
| Name or type | Where | What it does | How long |
|---|---|---|---|
| Sign-in cookie | Dashboard and app | Keeps you signed in and tells the server which company and role you belong to. Signed so it can't be faked | Until the browser closes (12 hours at most), or 30 days if you choose "Remember this device" |
| Security cookies | Sign-in pages | Protect sign-in with Google, Apple or Intuit against forged requests (a one-time "state" check) | Minutes |
| rh-theme (local storage) | Website | Remembers light or dark mode | Until you clear it |
| rh-leak (local storage) | Website | Remembers the numbers you typed into the leak meter, on your device only. We don't receive them unless you send a form | Until you clear it |
| Settings (local storage) | Dashboard and app | Remembers screen choices like filters and which tab you had open | Until you clear it or sign out |
| Stripe cookies | Client payment pages and our checkout | Set by Stripe to prevent fraud and keep payments secure. Governed by Stripe's privacy policy | Set by Stripe |
| Sign-in provider cookies | Google, Apple and Intuit pages | Set by those companies on their own sites when you choose to sign in with them | Set by them |
Analytics: we count website visits with privacy-focused analytics (Vercel Web Analytics) that don't use cookies, don't follow you across other sites, and don't build a profile of you.
3. What we don't use
- No advertising or retargeting cookies.
- No social media pixels (such as Meta or Google Ads tags) on our website, dashboard, app, or client pages.
- No cross-site tracking, and we don't sell or share data for targeted advertising.
If that ever changes, we will update this notice and the Privacy Policy first, ask before setting any non-essential cookie where the law requires it, add a "Do Not Sell or Share My Personal Information" link, and honor Global Privacy Control signals as an opt-out.
4. Global Privacy Control and Do Not Track
We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of your personal information. Since we don't sell or share, nothing changes in practice, but the signal is honored. Browsers' older "Do Not Track" setting has no common standard; we don't track you across sites either way.
5. Your choices
- Your browser lets you see, block and delete cookies and local storage. If you block essential cookies, you won't be able to sign in.
- Clearing local storage resets your theme and leak-meter numbers. Nothing else is lost.
- On the iPhone app, signing out clears the sign-in.
6. Pages companies send their clients
When a company sends you a quote, invoice or portal link through Right Hand, the page uses only the essential cookies above (and Stripe's, if you pay). The company that sent the link is responsible for its own use of your information. See Terms for your clients.
7. Contact
Questions: privacy@righthandcrm.com · Revive Flow LLC, doing business as Right Hand · ADDRESS