1. What this covers
Cookies and similar technologies (local storage, session storage) used by TradeForge.
2. Strictly necessary (no consent needed)
| Name | Purpose | Duration | Type |
|---|---|---|---|
| tf_access | Keeps you signed in (HttpOnly; the token inside expires after 15 minutes) | 7 days | First-party cookie |
| tf_refresh | Renews your session (HttpOnly) | 7 days | First-party cookie |
| XSRF-TOKEN | Protects against cross-site request forgery | 7 days | First-party cookie |
| tf_ctrader_oauth | Secures the cTrader connection flow | 10 minutes | First-party cookie |
| tf_ctrader_onboarding | Returns you to signup after connecting cTrader | 10 minutes | First-party cookie |
| tf_session | Tells the app a session exists | 7 days | First-party cookie |
| tf_consent | Remembers your cookie choice | 6 months | Local storage |
| tf_sync_snooze, tf_account, tf_verify_sent, tf_pastdue_dismissed, tf_sub_status, tf_onboarding_cadence, tf_draft_* | Remember your interface choices, signup plan choice, verification cooldown and unsaved journal edits | Until cleared (local storage) or until the tab closes (session storage) | Local or session storage |
| Live demo only: tf_daily_journal*, tf_journal_*, tf_strategies, tf_trade_strategy_*, tf_mock_notes_erased | Keep the sample notes and strategies you edit in the demo, in your browser only | Until cleared | Local storage |
| Paddle checkout, Google sign-in | Set by those providers when you use them | Per provider | Third-party |
3. Analytics and error reports (only with your consent)
We use PostHog (EU servers) to understand how the product is used and to catch errors. PostHog does not load until you choose Accept in the cookie banner. If you accept, it stores an identifier in a cookie and in local storage.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| ph_<project key>_posthog | PostHog analytics identifier and session | Up to 1 year | First-party cookie and local storage |
| __ph_opt_in_out_<project key> | Remembers that you withdrew, so analytics stays off | Until cleared | Local storage |
4. Advertising cookies
We do not use advertising or tracking cookies.
5. Managing your choices
Use the Cookie settings link in the site footer or in Settings to accept or reject analytics at any time. Rejecting is as easy as accepting, and rejecting later deletes what PostHog stored. We ask again after 6 months or when we change what analytics collects. Your browser also lets you block cookies, but the site will not work without the strictly necessary ones.
6. Contact
support@tradeforgelive.com