Cookie Policy
Before launch: this describes a no-advertising-tracker setup, which is what the app appears to use today. If you ever add analytics, a marketing pixel, or a chat widget, you must update this page and add a consent banner — in the EU/UK a banner is required before any non-essential cookie is set.
This page explains what Shadow Forge stores in your browser.
The short version: we use a small number of strictly necessary cookies and browser-storage entries to keep you signed in and remember your preferences. We do not use advertising cookies, we do not run third-party trackers, and we do not sell what we store.
1. What we use
"Cookies" here covers cookies proper and equivalent browser storage such as localStorage, which the app uses to hold your session and your local working data.
2. Strictly necessary
| Name / purpose | Set by | Life |
|---|---|---|
| Authentication session — keeps you signed in between visits | Supabase Auth | Until you sign out or it expires |
| Local app state — your preferences, units, and offline working data | Shadow Forge | Until you clear your browser storage |
| Checkout session — carries you through payment and back | Stripe | The length of the checkout |
These are strictly necessary: the Service cannot sign you in or take a payment without them, so they do not require consent under EU/UK rules.
3. What we do not use
No advertising or retargeting pixels. No cross-site trackers. No social media embeds. No session recording. No behavioural analytics. If that ever changes, this page changes first, and we will ask for consent where the law requires it.
4. Managing them
You can clear or block cookies in your browser settings. Blocking the strictly necessary ones will sign you out and prevent the app from working. Clearing local storage will remove unsaved local work — export or sync anything you care about first.
