Cookies & Identifiers

Cookie Policy

Effective Date: April 23, 2026 · Last Updated: April 23, 2026

SparkForge uses four first-party cookies/storage items. We do not use any analytics cookies, advertising pixels, third-party tracking scripts, or any cross-site/cross-app tracking technologies. We do not sell or share information derived from cookies.

1. What is a cookie?

A "cookie" is a small text file a website stores in your browser. It can hold information like a session ID so the site recognizes you on later visits. Modern web apps also use related browser-storage features such as localStorage and sessionStorage; for clarity we treat all of them collectively as "cookies and persistent identifiers" in this policy.

Under COPPA FAQ A.3, persistent identifiers that recognize a user over time and across services count as personal information. SparkForge uses persistent identifiers only for the limited "support for internal operations" purposes permitted under 16 CFR § 312.2.

2. Complete inventory

Every cookie or persistent identifier SparkForge sets is listed below. If you find a storage item not in this list, please report it to privacy@sparkforge-labs.com.

`sb-* (Supabase auth)`

First-party

Set by:SparkForge (first-party, via Supabase Auth SDK)Type:HTTP cookie (httpOnly, Secure, SameSite=Lax)Purpose:Maintains your authenticated session so you do not have to log in on every page load. Refresh token enables silent renewal.Duration:Session for access token; up to 7 days for refresh tokenCOPPA basis:Authentication is "support for internal operations" under 16 CFR § 312.2

`sparkforge-active-child`

First-party

Set by:SparkForge (first-party, localStorage)Type:localStorage (not a transmitted cookie)Purpose:Remembers which child profile was last selected so the child returns to their own dashboard.Duration:Persists until manually cleared or the child profile is deletedCOPPA basis:Personalization for the same registered child; "support for internal operations"

`sparkforge-demo-active`

First-party

Set by:SparkForge (first-party, sessionStorage)Type:sessionStorage flag with expiry timestampPurpose:Indicates an active demo session and tracks the 1-hour session timer.Duration:1 hour maximum (deleted at session expiry)COPPA basis:No PI is collected during demo mode; flag is functional only

`sparkforge-skip-intro`

First-party

Set by:SparkForge (first-party, localStorage)Type:localStorage preferencePurpose:Records your preference to skip the intro animation on subsequent visits.Duration:Persists until manually clearedCOPPA basis:Pure UI preference; not a tracking identifier

3. What we do not use

No third-party analytics cookies (no Google Analytics, no Mixpanel, no Hotjar, no Heap, no Amplitude).
No advertising pixels (no Meta Pixel, no Google Ads tag, no TikTok Pixel, no LinkedIn Insight).
No social-media share trackers (no Facebook Like button, no Twitter widget cookies).
No data-broker tags or audience-segmentation pixels.
No fingerprinting via canvas, WebGL, font enumeration, or audio-context probing.
No cross-site or cross-app tracking technologies.

4. How to control cookies in your browser

You can clear or block cookies and storage items at any time from your browser's settings:

Google Chrome — Settings → Privacy and security → Cookies and other site data
Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
Apple Safari — Preferences → Privacy
Microsoft Edge — Settings → Cookies and site permissions

Note: Blocking the Supabase authentication cookie will sign you out and prevent you from using SparkForge while logged in. Demo mode will continue to work.

SparkForge honors the Global Privacy Control (GPC) browser signal where applicable. Because we do not engage in any "sale" or "sharing" of personal information as defined under the CCPA/CPRA, GPC has no additional effect on first-party functional cookies, but we treat any future analytics or advertising integrations as opted-out by default for visitors transmitting GPC.

5. Changes to this Cookie Policy

If we add or remove a cookie or persistent identifier, we will update the inventory above and bump the "Last Updated" date. If a change materially affects how children's data is processed, we will obtain new parental consent before the change takes effect, consistent with our Privacy Policy.

6. Questions

SparkForge LLC — Privacy Team (an Illinois limited liability company)
Telephone: (773) 629-2320
Email: privacy@sparkforge-labs.com

See also our full Privacy Policy and children's privacy notice.

LEGAL REVIEW REQUIRED: This cookie policy has been drafted to align with COPPA FAQ A.3 (persistent-identifier treatment), the 16 CFR § 312.2 "support for internal operations" exception, and CCPA/CPRA cookie-disclosure expectations. It should be reviewed by qualified legal counsel before production deployment. The cookie inventory must be re-verified against runtime behavior before each release.