Cookie Policy

Last updated: September 2026

Short version

The Goalsforge marketing site sets no marketing, advertising, or third-party tracking cookies. We do use two privacy-respecting analytics providers (Umami and OpenPanel) to understand which pages and analyses are most useful. Neither sets tracking cookies, neither builds persistent visitor profiles, and neither sells data. The only cookies or similar storage we set ourselves are strictly necessary to operate the service (authentication, security) or are used to remember your cookie preference.

What is a cookie?

A cookie is a small text file placed on your device by a website. "Similar technologies" include localStorage, sessionStorage, and pixels. The rules below cover them all.

Cookies we use

1. Strictly necessary

These cookies are required for the service to work. Without them you cannot sign in or use authenticated parts of the product. They do not require consent under Art. 5(3) of the ePrivacy Directive (Directive 2002/58/EC).

  • Session / authentication cookies: set by the Goalsforge web app when you sign in, to keep you signed in across requests. Lifetime: session or up to 30 days depending on the "remember me" choice.
  • Security cookies: used to detect abuse, prevent cross-site request forgery, and rate-limit requests. Lifetime: session or up to 24 hours.

2. Preferences

  • Cookie preference: stored in your browser's localStorage undergf_cookie_consent to remember whether you dismissed or accepted the cookie banner. Lifetime: 12 months. The data is local-only and is not transmitted to any server.

3. Analytics

We use two providers to measure which pages and analyses are most useful. Both are designed to be privacy-respecting and do not require consent under most EU member-state implementations of Art. 5(3) of the ePrivacy Directive, because they do not set tracking cookies and they do not build persistent cross-site profiles.

  • Umami. Cookieless page-view analytics. Loaded from https://cloud.umami.is. Collects: page URL, referrer, browser name and version, operating system name and version, device type, and city-level country derived transiently from the request IP (the IP itself is not stored). See theUmami privacy policy.
  • OpenPanel. Privacy-first product analytics. Loaded fromhttps://openpanel.dev/op1.js. Collects: page URL, referrer, browser name and version, operating system name and version, device type, brand and model, and city, country and region (derived from IP transiently, then discarded). No IP addresses are stored, no cookies are set, no persistent cross-device identifiers are created. Analytics data is stored on Hetzner infrastructure in Germany (EU). See theOpenPanel privacy policy.

We do not use Google Analytics, Meta Pixel, LinkedIn Insight, Hotjar, Plausible, Fathom, or any equivalent advertising or cross-site tracking tool on this marketing site (goalsforge.com) or inside the Goalsforge app.

Third parties that may set cookies

The website is served through Cloudflare's CDN. Cloudflare may set its own strictly-necessary cookies for routing, caching, and security (for example__cf_bm for bot management). These are governed by Cloudflare's privacy and cookie documentation rather than ours:cloudflare.com/privacypolicy.

How long cookies stay on your device

  • Session cookies: deleted when you close the browser.
  • 30-day cookies (e.g. "remember me"): up to 30 days.
  • Cookie-preference record: up to 12 months.
  • Cloudflare security cookies: typically up to 30 minutes to 24 hours, depending on the cookie.

How to control cookies

You can withdraw or change your choice at any time by clearing your browser's storage for goalsforge.com, or by clicking "Manage preferences" in the cookie banner. You can also block cookies in your browser settings; blocking strictly-necessary cookies will break sign-in and security features.

Helpful guides for the most common browsers:

Changes to this policy

If we add new cookies or change the categories above, we will update this page and bump the "last updated" date. For anything material we will also notify registered users by email.

More about your data

For lawful basis, recipients, retention, and your GDPR / UK-GDPR rights, see ourPrivacy Policy.

Contact

Questions about cookies or storage on this site:info@goalsforge.com.