Cookie Policy
Last updated May 2026
Forge Engine uses a small number of cookies and similar technologies to keep you signed in, process payments, and (with your consent) understand how the product is used. This page explains what we set, why, and how to control it.
We follow the UK’s Privacy and Electronic Communications Regulations (PECR) and UK GDPR. Non-essential cookies are not set until you give explicit consent through the banner shown on your first visit. You can change your choice at any time from the link in the footer.
Categories we use
Essential cookies (always on)
These are strictly necessary for Forge Engine to work. We cannot deliver the service without them, and they do not require consent under PECR.
- Supabase auth session (
sb-*): keeps you signed in. HttpOnly. Set when you log in. Cleared when you sign out. - CSRF / request integrity: short-lived tokens that protect form submissions from cross-site request forgery.
- Stripe checkout (
__stripe_*): set by Stripe only when you visit a payment page, used to detect fraud and complete the transaction. See Stripe’s cookie policy. - Cookie-preference record: a single localStorage entry (
forge:cookie-consent) that stores your choice so we don’t ask again on every page load.
Analytics cookies (consent required)
Anonymised, aggregated usage data so we can see which features are used and where people get stuck. We do not run ad-network trackers. If you opt out, Forge Engine works exactly the same; we just have less visibility into how to improve it.
- Privacy-respecting product analytics (currently evaluating providers).
Marketing cookies (consent required)
We do not currently use marketing or retargeting cookies. This category exists so that, if we ever introduce them, they will be opt-in and listed here first.
Managing your choice
Use the cookie banner shown on your first visit, or open it again from the footer of any public page (link “Cookies”). You can also clear the choice in your browser settings; the banner will reappear on your next visit.
Browser-level controls
Most browsers let you block or delete cookies entirely. Doing so will sign you out of Forge Engine and prevent payments from completing. The aboutcookies.org guide covers per-browser instructions.
Changes to this policy
If we add a new cookie category we will surface a refreshed banner asking for your consent again, and update the “Last updated” date at the top of this page.
Contact
Questions about cookies or your privacy choices? Email support@forgeengine.io. Forge Engine is operated by Nimbus Compute Ltd, registered in the United Kingdom.