Cookies and local storage
forgeby.com sets no cookies. The signed-in app keeps its session state in your browser. This page is the complete inventory: what is stored, where, why, and how to clear it. It is published to meet the EU ePrivacy transparency rules, and because you should not have to trust a banner, least of all a banner that is not there.
Last updated 26 August 2026The short version
- The marketing site, forgeby.com, sets no cookies. It runs one performance script, Vercel Speed Insights, named in full below; it writes nothing to your browser at all. It does remember one choice you make here, in local storage: which theme you picked. That is strictly necessary to give you the page you asked for, so there is no consent banner.
- The app stores session state in your browser's local storage so you stay signed in and your preferences hold. That storage is strictly necessary for the service you signed in to, and it is never used for advertising or tracking.
- No third-party trackers, anywhere. No Google Tag Manager, no advertising tags, no visitor-identification services. We never sell your data.
Why there is no consent banner
The EU ePrivacy rules, implemented in Sweden through the Electronic Communications Act, require consent before a site stores information on your device or reads information already stored there, unless that storage is strictly necessary for a service you have asked for. What forgeby.com stores is exactly that: the theme you chose, remembered so the next page looks the way you asked. Nothing is read for advertising, profiling or identification. The app's storage exists only to deliver the service you signed in to, which is the same strictly-necessary category. If we ever introduce storage that does need consent, a consent step will appear before that storage is set, not after.
The full inventory
| forgeby.com | No cookies and no tracking pixels. One performance script, Vercel
Speed Insights, which stores nothing in your browser. One item in local storage, set only when you
choose it: fg_theme, which remembers whether you picked the dark theme or Daylight.
Clearing site data removes it; the site works without it and simply forgets your choice. Until 26
August 2026 this row also listed fg_cur, a currency preference written by the pricing
page; that page was removed when the price card came off, and nothing has written the key
since. |
|---|---|
| The app, signed in | Local storage only: a sign-in session and interface preferences, described below. No advertising or tracking cookies of any kind. |
forgeby.com, the marketing site
One script measures how fast this site loads for you: Vercel Speed Insights. It is a performance tool, not a visitor counter, and it is named here rather than described in the abstract. Until 24 August 2026 this page said analytics ran on Plausible, which was never loaded; that was corrected, and this replaces it with what actually runs.
What it does, read from the script we serve rather than from the vendor's description. It is
loaded from this site's own domain rather than from a third-party script host, and
it posts its measurements back to this domain as well; Vercel forwards them onward from its own
servers, so your browser never contacts an analytics host directly. It
sets no cookie and writes nothing to local storage, session storage or IndexedDB:
searched, and there is not one such call in it. For each page-load measurement it sends the loading
metric, its value, the page URL, and a connection-speed class such as 4g read from
navigator.connection. The measurement id is a fresh random number each time, and since
nothing is stored it cannot follow you from one page to the next. It reads your user agent only to
skip automated browsers, and it does not read the referrer or your screen size. The report goes to
Vercel, our hosting provider, which is named in Annex B of the data processing
agreement.
Because it stores nothing on your device, there is nothing to consent to under the cookie rules and no banner appears. If that ever stops being true, this page changes before the script does.
We do not load Google Tag Manager, Google Analytics or Ads tags, the LinkedIn Insight Tag, or any visitor-identification service such as Albacross. There are no marketing pixels and no fingerprinting. If any of that ever changes, this page changes first and a consent step appears before anything loads.
The app
When you sign in to the Forgeby platform (formerly Alloy), the app keeps your session in a first-party cookie that only the server can read, and your interface preferences in your browser's local storage. Sign-in is by email and is for companies that sell IT products or services; there is no Google or social login, so no sign-in provider sets cookies on our pages. Two kinds of things are kept:
| Sign-in session | A session token that keeps you signed in while you work, held in a cookie marked HttpOnly and Secure, so no script on the page can read it and it never leaves this site. It expires by itself about an hour after you sign in, and signing out clears it at once. Two short-lived cookies also exist for a few minutes during sign-in itself, to carry you back to the page you asked for. |
|---|---|
| Interface preferences | Small settings the app remembers between visits, such as dismissed tips and the state of views you have arranged. Losing these costs nothing except your arrangement of the interface. |
This storage is essential to the service: without it the app cannot keep you signed in. It is readable only by the app itself, it is not shared with any third party, and it is not used for advertising, profiling or cross-site tracking of any kind.
How to clear it
- Sign out. Signing out of the app removes the session from your browser.
- Clear site data. Every browser can clear cookies and site data for a single site in its settings; clearing site data for the app removes the session and all stored preferences, and signs you out.
- Block storage. You can block storage entirely in your browser, but the app cannot then keep you signed in, because there is nowhere to keep the session. forgeby.com itself is unaffected: it works with storage fully blocked, since it never uses any.
Third parties
If you connect your CRM to Forgeby (the connectors currently offered are HubSpot, Lime, Pipedrive, Salesforce, webCRM and OnePageCRM), you authenticate on that provider's own site, and that provider may set its own cookies there under its own policy. Those cookies are set on the provider's domain, not ours, and we do not control them. Our sub-processors are listed in the data processing agreement.
Who we are
Forgeby, a service of Zmart Com West AB (registered name change to Forgeby AB in progress), Sweden. Questions about cookies, storage or anything privacy: privacy@forgeby.com. Anything else: partner@forgeby.com.
Changes
If our use of cookies or browser storage changes, we update this page and the date at the top. Anything that would require consent gets a consent step before it loads, not a mention here afterwards.