Cookie Policy
Cookies are small files placed on your device; pixels and SDKs are related technologies that collect similar data. This page lists what we use on forevercited.ai and in the client portal, why, for how long, and how to opt out.
1. Strictly Necessary
Required for the site and portal to function — sign-in, security, fraud prevention, payment processing, and remembering your consent choices. These cannot be switched off; without them the service does not work.
| Cookie / storage | Provider | Purpose | Duration |
|---|---|---|---|
sb-[project-ref]-auth-token | Supabase | Keeps you signed in to the client portal; carries your session and MFA state | Session / up to 7 days (refresh) |
__stripe_mid | Stripe | Fraud prevention and payment security | 1 year |
__stripe_sid | Stripe | Fraud prevention during a checkout session | 30 minutes |
forevercited_consent_v1 | Forever Cited | Stores your cookie consent and opt-out choices | 12 months |
2. Analytics
Help us understand how the site is used so we can improve it. Data is aggregated and IPs are truncated/not logged by GA4.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes visitors | 2 years |
_ga_[container-id] | Google Analytics 4 | Maintains session state | 2 years |
3. Advertising
Set by our advertising partners to measure campaigns and show relevant ads on other platforms. These involve transmitting identifiers and browsing activity to third parties, which is "sharing" / "sale" under the California Consumer Privacy Act and "targeted advertising" under other state laws. They fire only if you have not opted out.
| Cookie / tech | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta (Facebook/Instagram) | Meta Pixel — ad measurement and audience building | 3 months |
_fbc | Meta | Stores the ad click ID when you arrive from a Meta ad | 3 months |
| Meta Conversions API | Meta | Server-side event measurement (e.g., hashed email on form submit); suppressed when you opt out | n/a (server-side) |
_twclid / muc_ads | X (Twitter) | X Pixel — ad click attribution and conversion measurement | 1 month / 2 years |
4. How to Opt Out
- Consent manager: use our cookie consent manager to switch off Analytics and/or Advertising cookies. Your choice is stored for 12 months per browser/device.
- Global Privacy Control: enable GPC in a supporting browser or extension; we treat it as an automatic opt-out of advertising cookies and sale/sharing for that browser.
- Browser settings: block or delete cookies in your browser preferences (note: blocking strictly necessary cookies will break sign-in and checkout).
- Industry tools: Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), Meta ad preferences (facebook.com/adpreferences), X personalization settings, and optout.aboutads.info (DAA).
Opting out of advertising cookies does not stop you from seeing ads; it stops these partners from using data collected on our site to target or measure them.
5. Do Not Track vs. GPC
We do not respond to legacy "Do Not Track" signals because no common standard was adopted. We do honor the Global Privacy Control, which state privacy laws in California, Colorado, Texas, and other states recognize as a valid universal opt-out.
6. Changes and Contact
We update this list as our tools change; check the effective date above. Questions: hello@forevercited.ai, or MNFST INC — d/b/a Forever Cited, [ADDRESS]. See also our Privacy Policy for your full rights.