Cookie Policy
Effective Date: February 11, 2026 | Last Updated: February 11, 2026
This Cookie Policy explains how QuikForms, LLC ("QuikForms," "we," "us," or "our") uses cookies and similar tracking technologies on our marketing website at www.sfquikforms.com (the "Marketing Site") and in connection with QuikForms-powered forms rendered within customer Salesforce environments (the "Form Pages"). This policy should be read in conjunction with our Privacy Policy.
This Cookie Policy is designed to comply with the EU ePrivacy Directive (Directive 2002/58/EC, as amended by Directive 2009/136/EC), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, and other applicable data protection and privacy laws.
By continuing to use our Marketing Site after being presented with our cookie consent mechanism, you consent to the use of cookies as described in this policy, except for strictly necessary cookies, which do not require consent.
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. Cookies are widely used to make websites work more efficiently, to provide information to the website operators, and to enable certain functionality.
Cookies can be "first-party cookies" (set by the website you are visiting) or "third-party cookies" (set by a party other than the website you are visiting). Cookies can also be "session cookies" (deleted when you close your browser) or "persistent cookies" (remaining on your device for a set period or until you delete them).
3. How QuikForms Uses Cookies
QuikForms operates two distinct web presences, each with different cookie profiles:
- The Marketing Site (www.sfquikforms.com) -- our public-facing website describing QuikForms products and services.
- QuikForms-Powered Form Pages -- forms built using QuikForms that are rendered within customer Salesforce organizations and accessed by end users.
QuikForms does not use advertising or targeting cookies on any of its web presences. We do not sell personal data collected through cookies to third parties.
4. Cookie Categories
We classify cookies into the following categories in accordance with the ICC UK Cookie Guide and common industry practice:
4.1 Strictly Necessary Cookies
These cookies are essential for the operation of a website or service. They enable core functionality such as security, bot protection, and session management. Because these cookies are strictly necessary, they do not require user consent under the ePrivacy Directive.
4.2 Analytics and Performance Cookies
These cookies collect information about how visitors use a website, such as which pages are visited most often and whether visitors receive error messages. These cookies do not identify individual visitors. All information collected by these cookies is aggregated. They are used solely to improve how the website works. These cookies require user consent before being set.
4.3 Functionality Cookies
These cookies allow a website to remember choices a user makes and provide enhanced or personalized features. QuikForms does not currently use functionality cookies on any of its web presences.
4.4 Advertising and Targeting Cookies
These cookies are used to deliver advertisements relevant to a user and to track the effectiveness of advertising campaigns. QuikForms does not use advertising or targeting cookies on any of its web presences.
5. Cookies on the Marketing Site (www.sfquikforms.com)
5.1 Analytics and Performance Cookies
The Marketing Site uses a custom, privacy-focused analytics solution to understand how visitors interact with the site. Our analytics system collects aggregate, anonymized usage data such as page views, session counts, and general traffic patterns. It does not use third-party tracking cookies and does not transmit personally identifiable information to external analytics services.
5.2 Third-Party Services on the Marketing Site
Google Fonts: The Marketing Site loads web fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When a page is loaded, your browser makes a request to Google's servers to retrieve the font files. This request transmits your IP address to Google and may result in Google setting cookies. For more information, see the Google Fonts Privacy FAQ.
5.3 No Other Third-Party Tracking
The Marketing Site does not use any other third-party tracking, advertising, social media, or remarketing cookies or similar technologies beyond those described in Sections 5.1 and 5.2 above.
6. Cookies on QuikForms-Powered Form Pages
When end users access a form built with QuikForms within a customer's Salesforce environment, the following cookies may be set by third-party services integral to the form's operation. QuikForms itself does not set any of its own cookies on Form Pages. QuikForms analytics on Form Pages use server-side IP hashing techniques rather than cookies.
6.1 Strictly Necessary Cookies
| Cookie Name | Provider | Purpose | Type | Expiration |
|---|---|---|---|---|
cf_clearance |
Cloudflare | Set by Cloudflare Turnstile CAPTCHA. Indicates that the visitor has successfully completed a Cloudflare challenge. Used to prevent bot abuse and protect form submissions. | Persistent, Third-party | Set by Cloudflare (typically 30 minutes, but may vary) |
__cf_bm |
Cloudflare | Cloudflare Bot Management cookie. Used to distinguish between humans and bots. Supports the Cloudflare Turnstile CAPTCHA integration that protects form submissions from automated abuse. | Persistent, Third-party | 30 minutes |
| Salesforce session cookies | Salesforce | Standard Salesforce platform session cookies required for the proper functioning of Salesforce Experience Cloud sites and Visualforce or Lightning pages that host the forms. These cookies manage user sessions and maintain site state. | Session, First-party (relative to the Salesforce domain) | Session (expires when the browser is closed) or as set by the Salesforce platform |
6.2 No Analytics, Functionality, or Advertising Cookies
QuikForms does not set analytics, functionality, advertising, or targeting cookies on Form Pages. Server-side analytics performed by QuikForms on Form Pages use a privacy-preserving, one-way hash of the submitter's IP address rather than client-side cookies.
7. Information for QuikForms Customers (Data Controllers)
This section is intended for organizations that use the QuikForms managed package within their Salesforce environments. If you are a QuikForms customer, you are the data controller for personal data collected through your forms, and you are responsible for your own cookie compliance.
7.1 Cookies Set by the QuikForms Package
The QuikForms managed package causes the following cookies to be set on your form pages through its integration with third-party services:
Cloudflare Turnstile (Bot Protection):
| Cookie | Set By | Purpose | Lawful Basis Suggestion |
|---|---|---|---|
cf_clearance |
Cloudflare, Inc. | Confirms the user has passed a bot detection challenge. Required to protect form integrity. | Legitimate interest (security) or strictly necessary |
__cf_bm |
Cloudflare, Inc. | Bot management and detection. Required for Cloudflare Turnstile CAPTCHA functionality. | Legitimate interest (security) or strictly necessary |
Salesforce Platform:
| Cookie | Set By | Purpose | Lawful Basis Suggestion |
|---|---|---|---|
| Salesforce session cookies | Salesforce, Inc. | Standard platform cookies for site functionality and session management. | Strictly necessary |
7.2 What QuikForms Does NOT Set
- QuikForms does not set any first-party cookies of its own on form pages.
- QuikForms does not set any analytics, tracking, advertising, or targeting cookies on form pages.
- QuikForms does not use browser fingerprinting or local storage for tracking purposes on form pages.
- QuikForms' server-side analytics use a one-way, irreversible hash of the visitor's IP address. No cookies or client-side identifiers are used for this purpose.
7.3 Customer Responsibilities
As the data controller for your forms, you should:
- Update your own Cookie Policy to disclose the cookies listed in Section 7.1 above, particularly the Cloudflare cookies, if your forms are accessible to users in jurisdictions that require cookie disclosure (e.g., the EU/EEA, the UK).
- Implement a cookie consent mechanism on your Salesforce Experience Cloud site if required by applicable law. Note that Cloudflare Turnstile cookies are generally classified as "strictly necessary" and may not require consent, but you should confirm this with your legal counsel based on your specific circumstances and jurisdiction.
- Review Cloudflare's privacy documentation for the most current information about Cloudflare cookies: Cloudflare Cookie Policy.
- Review Salesforce's privacy documentation for information about Salesforce platform cookies: Salesforce Privacy Information.
8. Your Cookie Choices and Rights
8.1 Browser-Level Controls
Most web browsers allow you to manage cookies through their settings. You can typically:
- View cookies currently stored on your device.
- Delete cookies individually or in bulk.
- Block all cookies or only third-party cookies.
- Configure cookie preferences on a per-site basis.
Please note that blocking or deleting cookies may affect the functionality of the website or forms you are using.
Instructions for managing cookies in common browsers:
- Google Chrome: Settings > Privacy and Security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Apple Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
8.2 Do Not Track Signals
Some browsers transmit "Do Not Track" (DNT) signals. There is currently no industry consensus on how to respond to DNT signals. QuikForms does not currently respond to DNT browser signals.
9. Legal Basis for Cookie Use
Under the ePrivacy Directive and GDPR, we rely on the following legal bases for setting cookies:
| Cookie Category | Legal Basis |
|---|---|
| Strictly Necessary Cookies (Cloudflare Turnstile, Salesforce session cookies) | These cookies are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive because they are strictly necessary for the provision of the service explicitly requested by the user. |
| Analytics and Performance Cookies | Our custom analytics solution does not use client-side cookies. Where any analytics cookies are used in the future, consent will be obtained through our cookie consent mechanism before these cookies are set, in accordance with Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. |
10. International Data Transfers
Some of the third-party services described in this Cookie Policy may transfer personal data outside the European Economic Area (EEA) or the United Kingdom:
- Google Fonts: Google LLC is based in the United States. Data transfers are governed by Google's data processing terms, which include Standard Contractual Clauses approved by the European Commission. For more information, see Google's Safeguards for International Data Transfers.
- Cloudflare: Cloudflare, Inc. is based in the United States. Cloudflare processes data at its global network of data centers. Data transfers are governed by Cloudflare's Data Processing Addendum, which includes Standard Contractual Clauses. For more information, see Cloudflare's Privacy Policy.
11. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required by applicable law, provide a prominent notice on our Marketing Site.
We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies and related technologies.
12. Contact Us
If you have any questions, concerns, or requests regarding this Cookie Policy, our use of cookies, or your rights under applicable data protection law, please contact us:
QuikForms, LLC
Email: [email protected]
Website: www.sfquikforms.com
If you are located in the European Economic Area and believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local Data Protection Authority. A list of EU Data Protection Authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
13. Definitions
For the purposes of this Cookie Policy:
- "Data Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation or set of operations performed on personal data, whether or not by automated means.
- "Cookie" means a small text file placed on a user's device by a website, used to store information about the user's interaction with the site.
- "Strictly Necessary Cookie" means a cookie that is essential for the operation of a website or for providing a service explicitly requested by the user.