FORGE Cookie and Similar Technologies Notice

Effective date: August 15, 2026

This Cookie and Similar Technologies Notice explains how Mediator Solutions LLC uses cookies, browser storage, and related technologies in connection with the United States FORGE website and application.

This Notice supplements the FORGE Privacy Policy. If a term is not defined here, it has the meaning given in the Privacy Policy or Terms of Service.

1. What these technologies are

A cookie is a small piece of data that a website asks a browser to store and return with later requests. Cookies may be temporary for a browser session or may remain for a defined period.

Other browser technologies may include local storage, session storage, device or browser identifiers, cache state, and comparable mechanisms used to preserve application state or security context.

FORGE uses these technologies for ordinary service operation. We do not treat the word "cookie" as limited to one browser mechanism where another technology performs a substantially similar function.

2. Categories used by FORGE

Strictly necessary and security technologies

These technologies support functions such as:

• maintaining an authenticated session after a successful sign-in;
• verifying that requests belong to the appropriate session;
• protecting against unauthorized access;
• preserving necessary checkout or account state;
• preventing fraud, abuse, or repeated authentication attacks;
• routing requests to the correct market or application surface;
• maintaining security and infrastructure continuity.

The Service may not function correctly if necessary session technologies are disabled.

Preference technologies

Where enabled, FORGE may use browser storage to remember choices such as:

• interface preferences;
• market or language selection;
• dismissals or temporary UI state;
• non-sensitive display settings.

These technologies are intended to reduce repetitive configuration and are not used to create an advertising profile.

Analytics technologies

FORGE may enable first-party or service analytics to understand reliability, aggregate product usage, page performance, and feature health. An analytics provider is not considered active merely because an environment variable, code path, or future configuration option exists in the repository.

If analytics technology that is not strictly necessary is activated and applicable law requires consent or an opt-out, the applicable consent or privacy-choice control will be presented before or when the technology is used.

Advertising technologies

As of the Effective Date, the ordinary FORGE U.S. product does not operate a cross-context behavioral advertising program and does not intentionally deploy advertising cookies to sell or share Customer Data for targeted advertising.

If this changes, we will update this Notice and the Privacy Policy and provide any legally required consent or opt-out mechanism.

3. Authentication cookies

FORGE uses secure session mechanisms to keep an authenticated user signed in after the user completes the passwordless sign-in flow. Authentication cookies or comparable session tokens may be configured with protections such as HttpOnly, Secure, signing, expiration, and same-site restrictions where technically appropriate.

Do not copy, share, expose, or attempt to reuse another person's session token.

4. Third-party checkout and payment pages

When you open a payment or billing-management flow, you may be redirected to a third-party payment provider such as Stripe. That provider may use its own cookies or related technologies for payment security, fraud prevention, authentication, checkout continuity, and legal compliance.

Those technologies are governed by the provider's own privacy and cookie practices when the provider acts independently. FORGE does not control all cookies set on a payment provider's separate domain.

5. Service providers

Providers used to operate the Service may process request metadata or use technical mechanisms necessary to deliver or protect the Service.

6. Browser controls

Most browsers allow you to view, block, delete, or limit cookies and site storage. Browser settings vary by provider and version.

Blocking strictly necessary cookies may prevent sign-in, account access, checkout continuity, or other Service functions from working.

Deleting cookies may sign you out and remove locally stored preferences.

7. Global Privacy Control

Some browsers or extensions send a Global Privacy Control (GPC) signal. Where applicable law requires a covered business to honor GPC for sale, sharing, or targeted-advertising opt-outs, we will process a technically valid signal as required.

Because FORGE does not currently sell personal information or use Customer Data for cross-context behavioral advertising, a GPC signal ordinarily does not change the core operation of the Service as currently configured.

8. Do Not Track

Some browsers transmit a legacy Do Not Track signal. There is no single universally implemented technical standard that requires every website to respond to that signal in the same way. FORGE does not currently use a legacy Do Not Track signal to alter ordinary necessary service processing.

This is separate from GPC, which may carry a legally recognized opt-out signal under certain U.S. state privacy laws.

9. Changes to this Notice

We may update this Notice as browser technologies, vendors, product functionality, or legal requirements change. The updated date will identify the current version.

If we introduce a materially different non-essential tracking practice, we will provide additional notice or choice where required by law.

10. Contact

Questions about cookies or privacy may be sent to:

Mediator Solutions LLC

Email: reach@prime88.studio