Cookie Policy

Essential authentication cookies

Better Auth session cookies keep a signed-in user authenticated and protect owner-only projects, assets, exports, billing records, and deletion controls. Disabling them prevents authenticated features from working.

An essential preference cookie remembers accept or reject for up to 180 days so ModeForge can honor the choice. Rejecting measurement sets no anonymous measurement identifier.

Google Analytics and optional ModeForge measurement

After you accept, ModeForge sets a random HttpOnly first-party anonymous identifier for up to 30 days and retains allowlisted ModeForge measurement events for up to 90 days. This first-party measurement covers conversion and generation quality without fingerprinting or cross-site tracking.

A separate random HttpOnly withdrawal capability lasts up to 120 days. It is not used for tracking and is stored server-side only as a one-way hash; it lets withdrawal delete retained events after the 30-day tracking identifier has expired.

ModeForge's identifier and allowlisted events do not contain a raw prompt, email, name, IP address, file name, object key, signed URL, media, provider response, Stripe payload or secret, or authentication token.

Google Analytics 4 runs by default, may set identifiers such as _ga, and receives the page URL, referrer, interaction and session data, and browser and device information. These identifiers may remain for up to two years after their last update unless they expire sooner or are removed. Google Analytics event retention is controlled in the linked GA4 property.

Checkout and external services

Selecting a configured product redirects to Stripe-hosted Checkout. Stripe may set cookies under its own policy. OpenAI, FASHN, MiniMax, and the S3-compatible storage operator are called by the server; ModeForge does not use their browser cookies for tracking.

Choice and withdrawal

The consent control offers Accept and Reject before optional ModeForge browser measurement begins. You can reopen Preferences and withdraw or change that choice; withdrawal clears ModeForge's anonymous identifier and deletes associated ModeForge anonymous and signed-in measurement events. It does not disable Google Analytics, which runs by default, or erase data already received by Google. A Google Analytics rejection recorded before this policy version remains honored in that browser for 180 days.