ModeForge legal
Cookie Policy
ModeForge uses essential cookies and, after explicit consent, one optional first-party anonymous identifier for measurement. It does not install advertising cookies or third-party analytics identifiers.
- Effective
- 2026-08-09
- Operator
- ModeForge Demo (no production operator configured)
- Contact
- support@modeforge.invalid
Essential authentication cookies
Better Auth session cookies keep a signed-in user authenticated and protect owner-only projects, assets, exports, billing records, and deletion controls. Disabling them prevents authenticated features from working.
An essential preference cookie remembers accept or reject for up to 180 days so ModeForge can honor the choice. Rejecting measurement sets no anonymous measurement identifier.
Optional first-party measurement
After you accept, ModeForge sets a random HttpOnly first-party anonymous identifier for up to 30 days and retains allowlisted measurement events for up to 90 days. It measures conversion and generation quality without fingerprinting, cross-site tracking, or third-party analytics cookies.
A separate random HttpOnly withdrawal capability lasts up to 120 days. It is not used for tracking and is stored server-side only as a one-way hash; it lets withdrawal delete retained events after the 30-day tracking identifier has expired.
The identifier and events do not contain a raw prompt, email, name, IP address, file name, object key, signed URL, media, provider response, Stripe payload or secret, or authentication token.
Checkout and external services
Selecting a configured product redirects to Stripe-hosted Checkout. Stripe may set cookies under its own policy. OpenAI, FASHN, MiniMax, and the S3-compatible storage operator are called by the server; ModeForge does not use their browser cookies for tracking.
Choice and withdrawal
The consent control offers Accept and Reject before optional browser measurement begins. You can reopen Preferences and withdraw or change the choice; withdrawal clears the anonymous identifier, deletes associated anonymous and signed-in measurement events, and prevents later browser emission unless you accept again.