Cookie Policy
Last updated: February 2026
Point Forward uses cookies and similar client-side storage to provide, secure, and improve the Service. This Policy explains what we use, why, how long each piece of data is stored, and how to control it.
1. What are cookies (and related technologies)?
Cookies are small text files a website stores in your browser. Related technologies include localStorage and sessionStorage, which behave similarly but persist only in the browser. Point Forward relies primarily on localStorage for authentication and preferences; we do not currently set traditional HTTP cookies on our own domain.
2. What we store
| Category | Storage key / name | Purpose | Duration | Set by |
|---|---|---|---|---|
| Essential | apc_token (localStorage) | Authentication JWT — keeps you signed in. | 24 hours (token lifetime) or until sign-out. | Point Forward |
| Preferences | pf_theme (localStorage) | Remembers light/dark theme choice. | Until cleared by you. | Point Forward |
| Preferences | i18nextLng (localStorage) | Remembers selected language. | Until cleared by you. | Point Forward |
| Preferences | pf_cookie_consent (localStorage) | Stores your analytics/tracking preference so we don't re-ask on every visit. | 12 months, then re-prompt. | Point Forward |
| Preferences | pf_nav_stack (sessionStorage) | Powers the "Back" button across pages. | Until browser tab closes. | Point Forward |
| Analytics | ph_* (localStorage & cookies) | PostHog: understands feature usage and product quality. Only set if you click "Accept analytics" on the cookie banner or in Settings. No pageviews, events, or session recordings are captured before that. | Up to 12 months. | PostHog Inc. (subprocessor) |
| Payment | __stripe_* (cookie, only on Stripe checkout pages) | Fraud prevention during payment. Set only if you subscribe to a paid plan. | Per Stripe policy (~1 year). | Stripe Inc. (subprocessor) |
3. Managing your preferences
You have three levers:
- In-app control — open Settings → Cookie Preferences, or click Cookie Preferences in the footer. You can toggle Analytics on/off. Essential and Preference storage cannot be disabled without breaking the Service.
- Browser control — every modern browser lets you delete or block cookies and localStorage. Doing so will sign you out and may break site features.
- Do Not Track (DNT) — if your browser sends the DNT signal, we treat that as a request to disable analytics regardless of what our banner says.
4. What happens if you disable Analytics
Everything continues to work — you just won't appear in our product-usage dashboards. No content, feature, or performance is degraded. Essential and Preference storage remain in place because they are required for the Service to function.
5. Third-party cookies
Analytics cookies are set by PostHog Inc. (US). Payment cookies are set by Stripe Inc. (US) only on payment pages. Both are subprocessors listed in our Privacy Policy and are bound by data-processing agreements.
6. Contact
Questions? Email dynesdalila@proton.me.