Cookies
Everything we store in your browser.
Not a category summary — the actual list, by name. If something is not on this page, ClipForge is not setting it.
The short version
- One cookie keeps you signed in. Without it there is no way to stay logged in, so it is not optional and we do not pretend to ask.
- Anything that is not strictly necessary is off until you say yes, and refusing costs you nothing.
- We do not use advertising cookies, and we do not sell or share what we measure.
You can change your answer at any time with the cookie preferences link, kept in the footer of every page.
Strictly necessary
These are needed for the service to work at all. Under the ePrivacy rules and the UK's PECR, storage that is strictly necessary to provide a service the user has asked for does not require consent — so there is no toggle for these. What there is instead is this list.
| Name | Type | What it does | Expires |
|---|---|---|---|
| cf_token | First-party cookie | Your signed-in session. Set when you log in, cleared when you log out. Marked HttpOnly so no script can read it, SameSite=Lax so another site cannot use it, and Secure in production. | 14 days |
| cf_consent | Local storage | Remembers the answer you gave below, so you are not asked on every page. It is stored locally and never sent to the server. | 12 months |
Blocking the first one means you cannot sign in. Blocking the second means the notice reappears each visit, which is the safe way for it to fail.
Optional
There are currently none. This deployment runs no analytics, so nothing is set beyond the two entries above and there is nothing to accept or decline. That is why you have not been shown a cookie banner: a notice with no choice behind it is theatre.
If that changes, this table fills in, the banner appears, and nothing optional loads until you have answered it.
What we do not use
- No advertising or retargeting pixels. No Meta pixel, no TikTok pixel, no Google Ads tag.
- No cross-site tracking, and no data broker or "audience" integrations.
- No session recording or heat-mapping tools that replay what you did on the page.
- No fingerprinting to identify a browser that has refused storage.
Third parties you may meet
Some parts of the product hand you over to another company, which then applies its own policy. We do not control what they set.
| Where | Who | Their policy |
|---|---|---|
| Checkout | Stripe, for payment and fraud prevention | stripe.com/privacy |
| Connect channel | Google, when you authorise YouTube access | policies.google.com/privacy |
| Fonts | Google Fonts serves the typeface files | Google Fonts privacy |
Google Fonts sets no cookies, but serving a font does disclose your IP address to Google. If that matters to you, a content blocker will stop it and the pages fall back to your system typeface with no loss of function.
Changing your mind
Use the cookie preferences link in the footer. Withdrawing consent is the same number of clicks as giving it, and takes effect immediately.
Your browser can also block or clear cookies for this site directly, in its privacy settings. Clearing site data removes both entries in the table above, which signs you out and brings the notice back.
Related
The Privacy Policy covers everything we hold beyond the browser — what is in the database, who processes it, how long it lasts, and how to get it deleted.