Cookie Policy
Last updated October 31, 2026
This Cookie Policy explains how 1602637 BC Ltd., operating as Fylely, uses cookies and similar technologies on fylely.com (formerly luminoussocial.com) and in the fiduciary workspace (the "Service"). It should be read alongside our Privacy Policy.
1. What Cookies Are
Cookies are small text files a website stores on your device to remember information between visits or requests. Some are essential for a site to function at all; others are used for analytics, personalization, or advertising.
2. Cookies We Use
We use strictly necessary cookies and preference cookies; no analytics or advertising cookies. The necessary ones are required for the Service to work — primarily to keep you securely signed in — and cannot be switched off in our systems without breaking core functionality such as logging in and staying logged in. Most are set only for the step they belong to, such as a sign-in code or connecting another service.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-…-auth-token (and its .0 / .1 parts) | Keeps you signed in and identifies your account securely as you move between pages. Page scripts cannot read it, and it is sent only over HTTPS. | Cleared when you sign out. The session inside it also ends when you are signed out for inactivity or from another device. |
| ls_device | Set only if you turn on two-factor authentication. Marks this browser as one you have already verified with a sign-in code, so you are not asked for a new code every time you sign in. It holds a random value; we store only its hash. | One year, or until you clear it or forget the browser in Settings. |
| ls_2fa_pending | Set only during a two-factor sign-in, between entering your password and entering the sign-in code. It tells us which sign-in the code belongs to. | Ten minutes at most; cleared as soon as the code is accepted or the attempt ends. |
| ls_passkey_challenge | Set only while you sign in with, or add, a passkey: which one-time challenge this browser was given. | Five minutes at most; used once. |
| ls_passkey_step | Set only if you use three-step sign-in, between the code and the passkey: a signed note that the password and the code were passed. | Ten minutes at most; cleared when the passkey step is done. |
| ls_family | Only for a person a firm has named on a matter: keeps them signed in to see that matter and their messages with the firm. It holds a random value; we store only its hash. | 30 days. It stops working as soon as the firm removes their access. |
| ls_outlook_state, ls_gmail_state, ls_gcal_state, ls_clio_state, ls_box_state, fy_qbo_state, fy_xero_state, fy_stripe_connect_state | Set only while you connect Outlook, Gmail, Google Calendar, Clio, Box, QuickBooks Online, Xero or Stripe: a random value that proves the reply from that service belongs to the connection you started. | Ten minutes at most. |
| ls_box_session | Set only when you sign in to Box to copy files into a matter: Box’s sign-in for your account, encrypted, so you can choose files without signing in again for each one. It works only for you, and only in this browser. | An hour at most (as long as Box allows), or until you press Sign out of Box. |
| ls_admin_session | Only for Fylely’s own staff, on our operator console. Never set for customers. | Eight hours, or until they sign out. |
Because these cookies are strictly necessary, most privacy frameworks — including Canadian law — do not require a consent banner for them; we still disclose them here for transparency.
These 5 preference cookies are set only when you make the choice they remember, and hold nothing but that choice. They are not used to identify or track you.
| Cookie | Purpose | Duration |
|---|---|---|
| pp_steps | Set only when you press "Not now" on a suggested next step on a matter: which suggestions you put away, so they stay put away on this browser. Each is a short code made from the first characters of the matter's internal ID and the kind of suggestion; no names or other details. | One year, or until you clear your cookies. |
| pp_tips | Set only when you skip the tip of the week or turn tips off: which tips you skipped, and whether tips are off on this browser. | One year, or until you clear your cookies. |
| pp_court_pack | Set only when you choose a jurisdiction on the Court forms page: which one, so the page opens on it next time. | One year, or until you clear your cookies. |
| fy_mailbox | Set only when you switch mailboxes on the Mail page: whether you last looked at Outlook or Gmail. | One year, or until you clear your cookies. |
| pp_matters_view | Set only when you switch the Matters page between List and Board: which one you last used. | One year, or until you clear your cookies. |
2a. Similar Technologies
We also keep some things in your browser's local storage. This is not a cookie: your browser does not send it to us with each request, and we do not use it to identify or track you. Most of it is a setting or a choice. Some holds the internal IDs of records you opened (never their names), and Ask keeps the phrases you teach it, which can be anything you typed. Where any of it reaches us, the row says so.
| Key | Purpose | Duration |
|---|---|---|
| fylely:privacy-choice | Remembers that you pressed Continue in the cookie settings. It does not enable tracking. | Until you clear site storage. |
| pp:color-scheme | Remembers which colour scheme you picked, so the workspace does not flash the default one while your preference loads. The same choice is saved with your account, so your other browsers use it too. | Until you clear your browser storage. |
| ls_last_activity | Only when your firm has turned on automatic sign-out: the time of your last activity, so every open Fylely tab signs out together. | Until you clear your browser storage. |
| fy_install_dismissed_at | Remembers that you chose "Not now" on the suggestion to install Fylely, so it is not shown again for 60 days. | Until you clear your browser storage or use Remove from this browser on /app. |
| pp-home-guide-dismissed | Remembers that you closed the "Welcome to Fylely" card on the home page, including on the sample workspace. | Until you clear your browser storage. |
| pp-home-card:… and pp-role-welcome | Which cards on the home page you folded or closed, including on the sample workspace. | Until you clear your browser storage. |
| pp-tool-prefs | Which tools you pinned, in what order, and how often and when you last opened each one, so the tools you use come first. | Until you clear your browser storage. |
| pp-recent-paths | The addresses of the last eight matters and contacts you opened, for the "recent" list. An address holds the record's internal ID, never its name. | Until you clear your browser storage. |
| pp-tour:… | Whether you finished or closed the guided tour, and where you stopped. The key includes your account's internal ID. | Until you clear your browser storage. |
| pp:dismissed-announcements and pp-notifications-announced | Which notices from us you closed, and the time of the last new notification this browser announced, so neither is shown twice. | Until you clear your browser storage. |
| pp-visit-day | The date this browser last opened the workspace. On the first visit each day it tells us that your account and firm opened the workspace that day (see the Privacy Policy); nothing else is sent. | Until you clear your browser storage. |
| pdfmap:… | For a fillable court form you have filled before: which of its fields you matched to which matter detail (for example "firm name"), never the values themselves. The same match is also saved with your firm. | Until you clear your browser storage. |
| pp-ask-learned and pp-ask-kept | Only if you teach Ask a phrase, correct it, tell it what to call you, or choose "Ask as typed": the phrases and words you gave it, and the name. They can contain anything you typed. | Until you clear them on the Ask page or clear your browser storage. Signing out does not remove them. |
These items are kept in session storage instead, which your browser clears when the tab closes. Ask's conversation is kept here, so it can hold client names or anything else you asked; clear the conversation on the Ask page, or close the tab, on a computer other people use. Part of some items can reach us, in the cases described:
| Key | Purpose | Duration |
|---|---|---|
| pp-ask-history, pp-ask-draft and pp-ask-pending | On the Ask page: the questions you asked in this tab, word for word (up to 30), what you had typed but not sent, and a question carried over from the Ask box at the top of the page. They can contain client names or anything else you typed. They never leave your browser, except as the Privacy Policy describes for "Help improve Ask". | Until you clear the conversation or close the tab. Signing out does not remove them. |
| pp-draft:… (one per box) | Words you typed in a note, a client update, a matter brief or a session note but have not saved yet, so a reload, a sign-out for inactivity or a save that failed does not lose them. They can contain client names or anything else you typed. They never leave your browser; the page offers them back with "Restore" and removes them once the words are saved. | Until the words are saved or discarded, or you close the tab. Signing out does not remove them. |
| ls_signup_ref | Only when you arrive on fylely.com through a link that names where it came from, such as the "Organized with Fylely" line on a page a firm shared with you: that short label (for example "share" or "intake"). If you create an account in the same tab, the label is sent with the signup form and kept with the account as where the signup came from. Otherwise it never leaves your browser. The sign-up buttons on our free calculator pages and in the sample workspace carry the same kind of label in the link itself (for example "tools-date-calculator" or "demo"); it is kept with the account the same way if you create one, and nothing is stored in your browser for it. | Until you close the tab. |
| pp-search-miss | Only if you turn on "Help improve search": after a search that found nothing, which search box it was, the time, and the page you searched from (its address without any search words, which on a matter holds the matter's internal ID). None of that is sent. When you open a different page within two minutes, only that page's name, from Fylely's own list of pages, and the search box are sent, on their own to a fixed address, to be added to an anonymous count (see the Privacy Policy). | Removed when the next page is counted or after two minutes; if you leave Fylely in that tab sooner, when you come back to Fylely there or close the tab. |
The optional Outlook add-in runs inside Outlook rather than in your browser's Fylely tab, and keeps its own sign-in in the storage Outlook gives it:
| Key | Purpose | Duration |
|---|---|---|
| fylely-outlook-addin-session | Keeps you signed in to the add-in: your sign-in tokens and email address. | Until you sign out of the add-in, or it is signed out because the sign-in expired or your firm's inactivity limit passed. |
| fylely-outlook-addin-active-at | When you last used the add-in, so your firm's automatic sign-out applies to it too. | Until you clear the add-in's storage. |
The optional Word add-in does the same inside Word:
| Key | Purpose | Duration |
|---|---|---|
| fylely-word-addin-session | Keeps you signed in to the add-in: your sign-in tokens and email address. | Until you sign out of the add-in, or it is signed out because the sign-in expired or your firm's inactivity limit passed. |
| fylely-word-addin-active-at | When you last used the add-in, so your firm's automatic sign-out applies to it too. | Until you clear the add-in's storage. |
| fylely-word-addin-matter | The internal ID of the matter you last chose, so the add-in can suggest it. No names. | Until you choose another matter, or clear the add-in's storage. |
2b. Offline Storage
When you sign in, Fylely installs a service worker: a small script your browser runs for fylely.com only, so that a page shows "You are offline" instead of an error when there is no connection. It keeps what is listed below in your browser's Cache Storage. Like local storage, this is never sent to us and is not used to identify or track you. It is removed with the rest of the site's data when you clear your browser storage, and Remove from this browser removes all of it, and the service worker, in one step.
If you turn on browser notifications in Settings, the same service worker shows them. Your browser then gives Fylely a push subscription (an address at your browser maker's push service, and keys that encrypt each notification so that service cannot read it), stored with your account so new bell items can be sent to this browser. Turning them off in Settings, or removing the app from this browser, removes it.
| Cache | Purpose | Duration |
|---|---|---|
| fy-shell-… and fy-static-… | The "You are offline" page and the files it needs to display. Contains no personal information. Set up only for people who sign in. | Replaced each time Fylely updates. |
| fy-court-day-v1 and fy-prefs-v1 | Only if you turn on "Keep this page on this device" on the Court day page, on that device: a copy of that page (hearing times, courts, and client names and phone numbers) and the setting itself. | Deleted when you sign out or turn the setting off. A copy older than 7 days is never shown, and is deleted the next time Fylely opens. |
3. Cookies We Do Not Use
As of the date at the top of this page, we do not use analytics cookies, advertising or retargeting cookies, or third-party tracking pixels on the Service. If that changes — for example, if we add product-analytics tooling to understand feature usage — we will update this policy first and add a cookie-consent control for any cookie that is not strictly necessary, before it is set. What we record about use of the workspace, such as the first time each day an account opens it, is kept in our own database without a cookie or a third-party tool (see the Privacy Policy). Counting which page people open after a search finds nothing also uses no cookie and is off unless you turn it on (Section 2a, and the Privacy Policy).
On our public pages (the homepage, pricing, calculators, guides, comparison and practice-area pages, help and these policies) we count visits ourselves, without a cookie, without storing anything in your browser, and without any third-party script: a page path, a source label from the link you followed, the referring site's hostname and a country code, plus a salted hash of your IP address and browser string that is used only to count distinct visitors that day and cannot be matched to anyone after the salt is deleted the next day. Browsers that send Global Privacy Control or Do Not Track are not counted. Details are in the Privacy Policy.
4. Managing Cookies
Open Cookie settings at the bottom of the screen to review your choice. Only the necessary cookies and the preference cookies above are used. Session replay and advertising are off, and the one optional usage count (Section 3) is off unless you turn it on. We do not load a session replay SDK. Fonts are served from our own site.
Most browsers let you block or delete cookies and site storage through their settings. Blocking the necessary cookies will prevent you from staying signed in to the Service; blocking the preference cookies or site storage only means your choices are not remembered. We don't control cookies your browser or operating system sets independently of our site.
5. Changes to This Policy
We may update this policy as the Service changes. Material changes — in particular, adding any non-essential cookie — will be reflected here with an updated date, and we will seek your consent first where the cookie is not strictly necessary.
6. Contact
Questions about this policy: cole@fylely.com.
1602637 BC Ltd., operating as Fylely. British Columbia, Canada.