Cookie and Browser Storage Policy
What this policy covers
Cookies store small values in your browser; local storage can keep larger device-local information. We use these technologies for sign-in, security and requested product features. The public site and app share an origin, so an existing app cookie may be present when you view a marketing or legal page.
The landing page does not install advertising cookies or analytics cookies. Cloudflare can still run cookieless performance/analytics beacons, including requests to /cdn-cgi/rum, and infrastructure security features. Cookieless does not mean no technical data is processed; see the Privacy Policy. Hosting/security providers process connection data and may use necessary security features. Ordinary image and file caching is not an advertising profile.
Current first-party inventory
nl_session— necessary authentication: an opaque, HttpOnly session cookie for signed-in accounts. New sessions expire after up to 30 days and can end earlier through sign-out, revocation, security changes or browser controls. MFA proof is checked on the server; the authenticator secret is not placed in this cookie.crm-brokerage-brand— functional preference: remembers a selected brokerage’s branding, rather than storing contact records. Newly set values last up to 30 days; browser rules and clearing can shorten retention.northline-sidebar-collapsed— functional preference: remembers whether the desktop sidebar is collapsed, for up to one year.- Editor-preview local storage — requested functionality: the Templatical preview can retain per-user draft content, sample images and saved preview blocks on the device, using keys beginning
northline:templatical-preview:v1:. It has no automatic time-based expiration and remains until replaced or cleared. This device-local preview storage is separate from campaign records saved to the server.
The legacy “northline” names are internal identifiers, not a separate data recipient. Signing out clears the active login cookie; preference cookies or preview drafts may remain. Clear browser storage on a shared device, and do not save confidential material in a preview. Existing values may also persist until their original expiration or until you clear them.
Provider security technologies
Cloudflare and other infrastructure providers may use cookies or equivalent checks for abuse prevention, challenge completion, routing or availability when those features are active. Their names and lifetimes depend on the security feature and provider settings. This is not a representation that every possible provider cookie is always installed. Read Cloudflare’s privacy information for its infrastructure practices.
Email pixels and tracked links
Email open/click measurement is separate from this website’s cookie inventory. Campaigns may include tracking images and links that generate recipient-level events, even if no advertising cookie is set. See Email tracking, consent and choices in the Privacy Policy for the data involved and available recipient choices. Blocking cookies alone does not turn off email tracking.
Your controls and future changes
Use browser controls to delete or block cookies and site storage. Blocking the session cookie prevents persistent sign-in; blocking preference or preview storage may stop those conveniences without authorizing advertising. Deleting device storage does not delete the server-side CRM account or every provider record. Contact legal@estateloop.app for a privacy request.
We do not currently sell/share data for cross-context advertising or install non-essential advertising/analytics cookies. If we add optional tracking that needs consent, we must provide the appropriate notice, choice and consent handling before using it. A policy update alone is not permission to install it. We will update this page when practices change.
Contact
Questions about cookies, storage or privacy: Dylan Totten, operating EstateLoop, at legal@estateloop.app.