Cookie notice

A cookie is a small text record stored by your browser. Tokenforest uses cookies only for sign-in, security, organisation selection and interface preferences.

Sign-in and security

• better-auth.session_token, sometimes carrying a secure browser prefix, identifies an authenticated session. It is normally kept for up to 30 days and refreshed while you use the service.
• Temporary authentication cookies protect account and email-verification flows against request forgery. They expire after a few minutes or when the flow ends.

Organisation and interface preferences

• tokenforest_org remembers the organisation or forest you selected. It is kept for up to one year.
• tokenforest_sidebar remembers whether the app sidebar is open or closed. It is kept for up to one year.

Cookie names can include a security prefix in production, and a browser may remove them earlier than the stated lifetime.

Tokenforest does not currently place analytics, advertising or cross-site tracking cookies. If you open Stripe checkout or the Stripe billing portal, Stripe may place cookies on its own domain under its own privacy and cookie terms.

You can remove or block cookies in your browser settings. Blocking sign-in or security cookies will stop account features from working. Removing preference cookies resets the selected organisation or sidebar state but does not delete your Tokenforest account.

Because Tokenforest currently uses only necessary and requested preference cookies, it does not display a cookie-consent banner. We will update this notice and request consent before adding a non-essential cookie where the law requires consent.

We may update this notice if our cookie use changes. Questions can be sent to hello@tokenforest.ai. See the Privacy policy for more about personal data.