Cookie Policy

MindForge sets only the cookies needed to sign you in and protect your session. We do not set advertising cookies.

Cookies We Set

• access_token: short-lived sign-in token. HttpOnly, SameSite=Lax. Expires when the access token does.
• refresh_token: lets us renew your session without asking you to sign in again. HttpOnly, SameSite=Lax. Valid for the refresh-token lifetime.
• csrf_token: readable by the page so it can be sent back with state-changing requests, protecting against cross-site request forgery. SameSite=Lax.

Local Storage

The app may keep interface preferences and unsent drafts in your browser's local storage. These stay on your device.

Controlling Cookies

You can block or delete cookies in your browser settings, but you will not be able to stay signed in without the cookies above. Signing out clears them.