Last updated: October 2, 2026

Cookie Policy

This Cookie Policy explains how FairForge LLC ("Stored", "we", "us") uses cookies on the Stored website and dashboard.

Contents

• What Are Cookies
• Cookies We Use
• No Tracking Cookies
• Lawful Basis
• Managing Cookies
• Contact

What Are Cookies

Cookies are small text files placed on your device by your web browser when you visit a website. They are used to remember your preferences, maintain sessions, and provide security features.

Cookies We Use

Stored uses only strictly necessary cookies required for the service to function. We use the following cookies:

Cookie Name	Purpose	Type	Duration
__Host-vaultaire_session	Maintains your authenticated session after login. The __Host- prefix means your browser accepts it only from this host, over HTTPS, and never for a subdomain.	HttpOnly, Secure, SameSite=Lax, host-only	24 hours
mfa_pending	Carries you from a correct password to the two-factor code step during sign-in.	HttpOnly, Secure, SameSite=Lax	5 minutes
oauth_state	Anti-forgery state for "Sign in with Google / GitHub".	HttpOnly, Secure, SameSite=Lax	10 minutes
onboarding_dismissed	Remembers that you closed the first-run guide on the dashboard.	HttpOnly, Secure, SameSite=Lax	1 year
flash	Displays one-time feedback messages (e.g., "Settings saved") after form submissions.	HttpOnly, SameSite=Lax	60 seconds

Cross-site request forgery protection uses no cookie. The dashboard's forms carry a token derived from your session; nothing extra is stored in your browser for it. (Until October 2026 a csrf_token cookie was used; the dashboard deletes it if your browser still has one.)

Browser storage (not cookies): the site and dashboard keep two keys in your browser's localStorage: sg-theme (your light/dark preference) and htmx-history-cache (the dashboard's page-navigation cache). Neither is sent to us.

No Tracking Cookies

Stored does not use:

• Analytics cookies (no Google Analytics, no Plausible, no Matomo; Cloudflare Web Analytics runs on the public pages without any cookie).
• Advertising or remarketing cookies.
• Third-party cookies of any kind. (Our edge provider, Cloudflare, may set a strictly necessary bot-mitigation cookie such as __cf_bm during an attack; it carries no identity and we never read it.)
• Fingerprinting or any other cross-site tracking technology.

We do not track your browsing behavior, build advertising profiles, or share any data with ad networks. Our public pages count visits on our own server without cookies, identifiers or third-party scripts, page, referring site, country and device class, as daily totals only. The Privacy Policy describes exactly what is kept.

Lawful Basis

All cookies used by Stored are strictly necessary for the operation of the service (session management, security, and user feedback). Under GDPR and the ePrivacy Directive, strictly necessary cookies do not require consent. Therefore, no cookie consent banner is displayed.

Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies will prevent you from logging in to the Stored dashboard, as the session cookie is required for authentication. Clearing cookies will log you out of your current session.

Contact

For questions about our use of cookies:

• Email: privacy@stored.cloud
• Entity: FairForge LLC