Cookies Policy

Version 1.0 / 2026-06-17

This policy describes which cookies and browser storage Forgge (forgge.dev) uses.

The cookies listed below are required for the service to function and cannot be disabled.

forge_session — sign-in session cookie. Stores a signed user authentication token. HttpOnly, SameSite=Lax, lifetime 30 days.
forge_oauth — temporary cookie for OAuth sign-in (Google/Apple). Protects against CSRF during social login: set at the start of the flow, verified in the callback and immediately deleted. HttpOnly, SameSite=None/Secure, lifetime 10 minutes. Present only when social sign-in is used.
forge_lang — selected interface language (ru/en). SameSite=Lax, lifetime 1 year.

The following items are stored in the browser's localStorage and are not sent to the server.

forge_theme — your selected theme (light/dark).
forge_chat_draft_<project> — chat message draft for a specific project (suffix = project slug). Auto-saved until sent.
cookie_prefs — your choice in the cookie banner (necessary only / all).

No analytics cookies are currently in use. If this changes, this policy will be updated.

Necessary cookies are always on — the cabinet cannot function without them.