Cookie Policy

1. What cookies and browser storage are

Cookies are small text files a website stores in your browser. Browser storage ("local storage" and "session storage") works in a similar way and lets a web app remember settings on your device. In this policy, "cookies" covers both.

2. Cookies we set

NamePurposeDurationCategory
session Keeps you signed in as you move between pages and protects forms against cross-site request forgery. It is signed and can't be read by page scripts (HTTP-only). Until you close your browser Strictly necessary
remember_token Keeps you signed in between browser sessions. It is set only if you tick "Remember me" when logging in, and removed when you log out. Up to 365 days, or until you log out Strictly necessary (set at your request)

3. Cloudflare: security cookies and cookieless analytics

Our website runs through Cloudflare, which protects it against attacks and bots. On the login, registration and password-reset pages, Cloudflare Turnstile checks that you're a human. As part of this, Cloudflare may set or read strictly necessary security cookies or browser storage, such as __cf_bm or cf_clearance. These are used only for security, not for tracking or advertising. See Cloudflare's cookie information and privacy policy.

We also use Cloudflare Web Analytics to see how the website is used, such as which pages are visited, where visitors came from and how quickly pages load. Cloudflare adds a small script to our pages for this. It sets no cookies, uses no browser storage, and doesn't identify you or follow you across other websites. See Cloudflare Web Analytics.

When you pay for a plan, you are taken to Stripe's secure checkout or billing portal, on Stripe's own website. Stripe sets its own cookies there for payment processing and fraud prevention, under Stripe's cookie policy.

4. Browser storage used by the app

After you sign in, the app stores these preferences, and a copy of your current conversation with Lily, the AI assistant, in your browser. This data stays on your device and is never sent to us.

KeyTypePurposeDuration
niftyforger.sidebarCollapsedLocal storageRemembers whether you collapsed the sidebarUntil you clear it
assembly_template_csv_column_mapping_v1:*Local storageRemembers how you matched CSV columns during an import, so you don't have to repeat itUntil you clear it
currentTabSession storageRemembers which tab you were onUntil you close the tab or log out
categoryCollapseStateSession storageRemembers which categories you expanded or collapsedUntil you close the tab or log out
assistantPanelSession storageKeeps the Lily panel open, and your current conversation with Lily, while you move around the app or reload the page. The messages themselves reach us when you send them, as the Privacy Policy describes; this copy is only so the panel can show them againUntil you close the tab or log out

5. What we don't use

We don't use Google Analytics or any analytics that sets cookies, advertising or retargeting cookies, social media tracking pixels, or cross-site tracking of any kind. Our only analytics is the cookieless Cloudflare Web Analytics described in section 3.

If that ever changes, we will update this policy first and, where the law requires it, ask for your consent before setting any non-essential cookies.

6. Controlling cookies

You can view, block or delete cookies and browser storage in your browser settings. If you block the cookies in section 2 or 3, you won't be able to sign in or use the app. Clearing browser storage just resets your app preferences.

7. More information

For more on how we handle personal information, see our Privacy Policy. Questions? Email contact@niftyforger.com.