Cookie Policy

1. What cookies and similar storage are

Cookies are small pieces of information that a website stores in your browser. Local storage and session storage work in a similar way: they also keep information in your browser, on your device. Server logs are different: they are kept on our servers and are described in our Privacy Policy.

2. What we use

We use one cookie and four browser storage entries for website features and to remember your choices. Their purposes are described below. We ask for your consent for the visit statistics described in section 5.

• __Secure-cf_refresh: a cookie that our account service sets when you sign in. It keeps you signed in. Your browser sends it only over encrypted connections, and scripts on the page cannot read it. It expires after 7 days without use and after 30 days at most. Category: strictly necessary.
• cf_api_route_v1: local storage on our website. It remembers which of our two connection routes holds your sign-in, so you stay signed in from page to page. It contains only the route name, nothing about you, and stays until you clear your browser storage. Category: strictly necessary.
• clador_chat_resume: session storage on our website, used only if you choose to continue with email in the chat. It keeps the visible conversation so that the chat reopens after you sign in. It is deleted as soon as the chat reopens, and after 30 minutes at most. Category: requested by you.
• clador_chat_bubble_done: session storage on our website. It remembers that you have opened the chat or closed its hint bubble, so the bubble does not appear again in this tab. It is deleted when you close the tab. Category: your interface choice.
• clador_analytics_consent: local storage on our website. It remembers whether you allowed or declined visit statistics (section 5), so that we do not ask again on every page. It contains only your choice and the date you made it. After 6 months we ask again. Category: your privacy choice.

3. What we do not use

We do not use advertising cookies, cross-site tracking, or analytics or performance-measurement cookies. Apart from the visit statistics in section 5, which run only if you allow them, our pages load no measurement or tracking code.

4. Third-party services you choose to use

Some features involve a third-party service. That service uses its own cookies under its own privacy and cookie notices:

• Sign-in with Google: when a sign-in form opens on our website or in the chat, it loads the sign-in button from Google. Google may set its own cookies and decides how to use them as an independent controller.
• Payment: checkout takes place on a page run by Lemon Squeezy, our reseller and Merchant of Record. We do not load its scripts on our pages.
• Links to other websites, such as social networks, lead to services that apply their own cookie rules once you open them.

5. Visit statistics, only with your consent

On your first visit we ask whether we may count your visits to improve our website. Only if you choose “Allow” does your browser load Vercel Web Analytics, a service of our hosting provider Vercel Inc., which acts as our processor. If you decline or do not choose, the script is not loaded and nothing is counted. Our legal basis is your consent (Art. 6(1)(a) GDPR), which also covers the script’s access to your browser described below.

The page-view analytics script sets no cookies and writes no entries to localStorage or sessionStorage. It checks localStorage for an entry named __va_attribution, which our website does not create. It uses no advertising or cross-site identifier and does not include your IP address in the page-view statistics. According to Vercel, visitors are distinguished using a hash derived from the incoming request, and visitor sessions are discarded after 24 hours. For each page view included in our analytics, it records the page address with query parameters and URL fragments removed, the referring website when this information is available, your approximate location (country, region and city, derived from your IP address), your browser, operating system and device type, and the time of the view. The script is loaded from our own website address, and its data is sent through it. Pages of our internal administration area are not counted.

Our current Vercel plan provides a 12-month reporting window. This is not a deletion deadline: Vercel may retain analytics data for longer. Under our data processing agreement, Vercel must delete Customer Data within a commercially reasonable time after the agreement ends, unless retention is required by law.

You can change your choice at any time with the buttons below. If you withdraw your consent, no new page-view data is sent from this browser. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Your rights to erasure of personal data and our obligations to erase it remain unaffected. Your choice applies only to this browser on this device.

6. Your choices

You can delete or block cookies and site storage in your browser settings. If you block the sign-in cookie or local storage, you cannot stay signed in. If you block session storage, the chat cannot reopen after you sign in, and the hint bubble may appear again. If you delete or block local storage, we cannot remember your choice about visit statistics and will ask you again.

7. Changes and contact

We update this policy when the cookies or storage we use change, and we change the date at the top of this page. For questions about cookies or privacy, contact support@cladorforge.com.