LEGAL
Cookie Policy
Last updated: . The Castforge desktop app doesn't use cookies. The castforge.ai website uses a small set of first-party cookies, every one of them listed below, and none of them for advertising or cross-site tracking.
Essential cookies
- The sign-in session cookie, which keeps you signed in (Supabase auth)
- It cannot be declined while signed in, because you would be signed out on every page load
Non-essential cookies
- A light/dark theme preference, which the banner controls
- Anonymous page-view stats via PostHog, which the banner also controls
- First-party markers the server sets, listed in full in the table below. They hold no identifier and are not used for advertising
- No third-party advertising or cross-site tracking cookies, ever
Your control
- Decline the analytics and preference cookies through the banner on your first visit
- Change those preferences anytime via the banner footer
- Clear every cookie from your browser settings, Castforge still works (you just sign in again)
- Email privacy@castforge.ai for any cookie-related question, including the server-set markers, which the banner does not currently cover
The desktop app doesn't use cookies
Castforge the desktop app uses local storage on your machine, not browser cookies, for your project state, preferences, and session data. Local storage lives in your platform's standard app-data directory (%APPDATA%/Castforge on Windows, ~/Library/Application Support/Castforge on macOS, ~/.local/share/Castforge on Linux). The rest of this policy applies only to the castforge.ai website.
Cookies on castforge.ai
The castforge.ai website sets the following cookies. We don't use any third-party tracking cookies. Page-view analytics comes from two places: PostHog, which uses the optional castforge_analytics cookie listed below and can be declined, and Vercel Web Analytics, which is cookieless. Vercel Web Analytics sets no cookie and no cross-site identifier, so it has no row in this table and nothing to decline.
The rows whose names begin with cf_are set by our server rather than by anything running in your browser. They are first-party, they hold no identifier, and no third party can read them. This table is generated from the site's own configuration, so a cookie that is switched off does not appear here and a cookie that is switched on always does.
| Name | Purpose | Type | Duration |
|---|---|---|---|
castforge_session | Sign-in session token (Supabase auth) | Essential | 30 days |
castforge_prefs | Light/dark theme preference | Optional | 1 year |
castforge_analytics | Anonymous page-view stats via PostHog | Optional | 1 year |
cf_seen_session | Records that this browser has held a signed-in session, so a later signed-out visit can be told apart from a first visit | Optional | 400 days |
Your choice
On first visit you'll see a banner letting you decline the analytics and preference cookies. Castforge still works the same, we just don't get analytics from your visits. You can change those preferences anytime via the banner footer (re-opens the same dialog).
Being straight with you about one limit: the banner records your choice in your browser, and the cf_ markers in the table above are set by our server before your browser has told it anything, so the banner does not currently govern them. They are first-party, they carry no identifier, and clearing cookies in your browser settings removes them. Bringing them under the banner is work we intend to do. Until it is done, this paragraph is here rather than a claim we cannot yet keep.
No advertising or cross-site tracking
Castforge does not use any advertising network or cross-site tracking cookies. We don't embed third-party ad scripts, retargeting pixels, or Facebook/Google ad cookies on castforge.ai. Analytics is anonymous. It runs through PostHog, which you can decline, and through Vercel Web Analytics, which is cookieless and sets no cross-site identifier. Neither one is an advertising network and neither one follows you to another site.
Questions?
Reach out to privacy@castforge.ai · or support@castforge.ai.
Typical response: within 2 business days