Cookie Policy

This Cookie Policy explains how Community Inviter, Inc. (“we,” “us”) uses cookies and similar technologies (localStorage, pixels, and tags) on ogforge.co and the OGForge Service. It is part of our Privacy Policy and Terms of Use. Other sites we operate, including inviter.co, have their own notices.

A cookie is a small file a site stores on your device. We use as few first-party cookies as we reasonably can. Some cookies are required to run the Service; others load only if you allow them.

1. Essential (always on)

These cookies and similar storage items are necessary for security, authentication, and remembering your cookie choice. They do not require consent under typical EU/UK guidance because they are strictly necessary, and they are not used to serve third-party ads.

• ogf_session — httpOnly session JWT. Set on login or Google callback. 7-day sliding expiry. Required to stay signed in. Without it, we cannot operate authenticated features.
• ogf_oauth_state — short-lived CSRF cookie during Google OAuth. Deleted after the callback. Required to complete Sign in with Google securely.
• ogf_cookie_consent (localStorage) — stores whether you allowed optional analytics and advertising, so we do not prompt on every page. Strictly necessary to record and honor your choice.

Cloudflare Turnstile (on register, login, and forgot-password) may set its own challenge cookies or similar storage. Those are security controls, not advertising. We also set ordinary technical data such as CSRF-related state where a flow requires it.

If you block essential cookies in your browser, parts of the Service (including sign-in) will not work. We are not obligated to provide a cookie-free equivalent of authenticated features.

2. Analytics (optional)

After you allow optional cookies, Google Analytics 4 (gtag) may measure visits, approximate location, device, and engagement. The measurement id is public by design. No analytics script loads until you opt in. Google acts as an independent controller of some analytics data. Google’s policy: Google Privacy Policy.

We use this data in aggregate to understand whether the Service is useful, to debug, and to improve pages. We do not use analytics to make legally significant decisions about you.

3. Advertising (optional)

Anonymous and Free visitors may see Google AdSense. Pro and Enterprise accounts do not see our ad slots. AdSense cookies and the ads script load only after you allow optional cookies on the banner or on this page. If neither analytics nor ads are configured on a given deployment, the banner does not appear and optional cookies are not used.

Google may use advertising cookies and identifiers for personalized or non-personalized ads, frequency capping, and measurement. Under some U.S. state laws this can be “sharing” or a “sale” of personal information. Choosing “Essential only” is how you opt out of that activity on OGForge. Global controls: Google advertising, Ad Settings.

We do not control Google’s further use of data it collects. Ads may be based on your Google profile and activity on other sites. We are not responsible for third-party ad content.

4. Third-party cookies we do not set

Stripe Checkout and the Customer Portal run on stripe.com and set their own cookies there — we do not read those. Google OAuth runs on Google’s domains during Sign in with Google. Blockchain wallets and networks used for x402 are outside this site. Those third parties are responsible for their own cookies.

5. Your choice

Current choice: not set (analytics and ads blocked until you choose)

“Essential only” withdraws consent for optional analytics and advertising on this browser and device. It does not delete cookies Google may already have set; use Google’s tools and your browser settings for that. Resetting the choice will show the banner again where it is enabled.

You can also delete or block cookies in your browser. Blocking all cookies will break sign-in. Browser controls apply only to that browser and device.

6. Retention of cookie data

Session cookies last up to the sliding 7-day window described above, or until you log out. OAuth state cookies are short-lived. Consent in localStorage remains until you change or clear it. Google’s cookies follow Google’s retention. Personal data associated with cookies is otherwise retained as described in the Privacy Policy.

7. Changes and contact

We may update this policy by posting a new version here. The “Last updated” date is controlling. Questions: [email protected].