Cookie Policy

We use exactly two cookies, both essential for the application to function. We do not use advertising, analytics, or tracking cookies.

Effective date: 3 October 2025

Cookie Summary

✓Two cookies total — both HttpOnly, SameSite=Lax, Secure (production).
✓No advertising cookies.
✓No analytics tracking cookies (no Google Analytics, Mixpanel, Meta Pixel, etc.).
✓No third-party cookies loaded by us.
✓Both cookies expire automatically — 30 days (session) and 7 days (anonymous).

1. What Are Cookies

Cookies are small text files stored in your browser by a website. They are commonly used to keep you logged in, remember preferences, or track behaviour across sessions. This policy discloses every cookie set by DOCUMENTFORGE.

2. Cookies We Use

DOCUMENTFORGE sets exactly two cookies, both are strictly necessary for the application to function:

df_session

Purpose: Authenticated session token — keeps you logged in.
Category: Strictly necessary
Duration: 30 days (deleted on logout)
Value: An opaque 256-bit cryptographically random token. Contains no personal data.
Flags: HttpOnly · SameSite=Lax · Secure (production)
Set by: DOCUMENTFORGE server on login or registration
Accessible to JavaScript: No (HttpOnly)

df_anon_session

Purpose: Anonymous session identifier — tracks quota usage for users who have not created an account. Also allows previously processed jobs to be claimed when you register.
Category: Strictly necessary
Duration: 7 days
Value: A randomly generated opaque identifier (e.g. anon_abc123...). Contains no personal data.
Flags: HttpOnly · SameSite=Lax · Secure (production)
Set by: DOCUMENTFORGE server on first tool use (if not logged in)
Accessible to JavaScript: No (HttpOnly)

3. Third-Party Cookies

We do not intentionally load third-party analytics scripts (Google Analytics, Mixpanel, Plausible, etc.) or advertising pixels (Meta Pixel, Google Ads, etc.) on our pages.

The Cashfree Payments checkout (accessed when subscribing to Pro) is hosted on Cashfree's own domain. Cashfree's own cookies and privacy practices apply on those pages. Please see Cashfree's Privacy Policy.

4. Local Storage and Session Storage

DOCUMENTFORGE does not deliberately write to localStorage or sessionStorage for tracking or persistent state. Any incidental browser storage from Next.js routing behaviour is transient and contains no personal data.

5. Managing or Disabling Cookies

You can control cookies through your browser settings. However, disabling the two essential cookies above will break core application functionality:

Disabling df_session will prevent login from persisting — you will be logged out on every page load.
Disabling df_anon_session will prevent quota tracking for anonymous use and disable job claiming on registration.

Guidance for managing cookies in popular browsers: Chrome, Firefox, Safari.

6. Changes to This Policy

If we add new cookies in future (e.g. for analytics or preferences), we will update this page and the effective date before setting any such cookies. We will not introduce non-essential cookies without appropriate disclosure.

7. Contact

For cookie-related questions, email privacy@documentforge.tech.

Questions about this policy? Contact us