Cookie Policy

1. What cookies and browser storage are

Cookies are small text files a website stores in your browser. Browser storage ("local storage" and "session storage") works in a similar way and lets a web app remember settings on your device. In this policy, "cookies" covers both.

2. Cookies we set

NamePurposeDurationCategory
session Keeps you signed in as you move between pages and protects forms against cross-site request forgery. It is signed and can't be read by page scripts (HTTP-only). Until you close your browser Strictly necessary
remember_token Keeps you signed in between browser sessions. It is set only if you tick "Remember me" when logging in, and removed when you log out. Up to 365 days, or until you log out Strictly necessary (set at your request)

3. Security cookies set by Cloudflare

Our website runs through Cloudflare, which protects it against attacks and bots. On the login, registration and password-reset pages, Cloudflare Turnstile checks that you're a human. As part of this, Cloudflare may set or read strictly necessary security cookies or browser storage, such as __cf_bm or cf_clearance. These are used only for security, not for tracking or advertising. See Cloudflare's cookie information and privacy policy.

When you pay for a plan, you are taken to Stripe's secure checkout or billing portal, on Stripe's own website. Stripe sets its own cookies there for payment processing and fraud prevention, under Stripe's cookie policy.

4. Browser storage used by the app

After you sign in, the app stores these preferences in your browser. This data stays on your device and is never sent to us.

KeyTypePurposeDuration
niftyforger.sidebarCollapsedLocal storageRemembers whether you collapsed the sidebarUntil you clear it
assembly_template_csv_column_mapping_v1:*Local storageRemembers how you matched CSV columns during an import, so you don't have to repeat itUntil you clear it
currentTabSession storageRemembers which tab you were onUntil you close the tab
categoryCollapseStateSession storageRemembers which categories you expanded or collapsedUntil you close the tab

5. What we don't use

We don't use Google Analytics or any other analytics service, advertising or retargeting cookies, social media tracking pixels, or cross-site tracking of any kind.

If that ever changes, we will update this policy first and, where the law requires it, ask for your consent before setting any non-essential cookies.

6. Controlling cookies

You can view, block or delete cookies and browser storage in your browser settings. If you block the cookies in section 2 or 3, you won't be able to sign in or use the app. Clearing browser storage just resets your app preferences.

7. More information

For more on how we handle personal information, see our Privacy Policy. Questions? Email contact@niftyforger.com.