Cookie Policy
Last updated: October 26, 2026
This Cookie Policy explains how Static Forms ("we", "us", or "our") uses cookies and similar tracking technologies when you visit our website at staticforms.dev. This policy should be read alongside our Privacy Policy.
What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners useful information about how their site is being used.
Types of Cookies We Use
1. Necessary Cookies (Always Active)
These cookies are essential for the website to function properly. They enable core functionality such as security, session management, and accessibility. You cannot opt out of these cookies as the website would not function properly without them.
| Cookie Name | Purpose | Duration |
|---|---|---|
auth_session | Maintains your login session and authentication state | Session / 7 days |
next-auth.session-token | NextAuth session management for secure authentication | Session / 30 days |
next-auth.csrf-token | Cross-site request forgery protection | Session |
cookie_consent | Stores your cookie consent preferences | 1 year |
| Theme preference | Remembers your light/dark mode preference | 1 year |
2. Analytics Cookies (Optional)
These cookies help us understand how people use our website and service, so we can improve them. If you are not signed in, they are only set if you allow analytics cookies. If you are signed in, Google Analytics and PostHog run as part of your account under our Terms of Service and PostHog links your activity to your account, as described in our Privacy Policy.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique users by assigning a randomly generated number | 2 years |
_ga_* | Google Analytics 4 | Maintains session state across page requests | 2 years |
_gid | Google Analytics | Distinguishes unique users | 24 hours |
ph_<project key>_posthog (cookie) | PostHog | Holds a randomly generated ID for your browser (replaced by your account ID once you sign in), the current session ID, whether you are signed in, and the address and referring page of the first page you viewed, so PostHog can group your page views and product events. Shared across staticforms.dev subdomains | 1 year |
ph_<project key>_posthog (local storage) | PostHog | Holds the same values as the cookie, plus PostHog's other settings for your browser, such as feature flag values and the referring website and campaign tags of your first visit | Until you clear your browser's site data |
ph_<project key>_window_id, ph_<project key>_primary_window_exists (session storage) | PostHog | Tells your browser tabs apart within a session | Until you close the tab |
__ph_opt_in_out_<project key> (cookie) | PostHog | Set only when you withdraw analytics consent, so PostHog stops for the rest of the page you are on. Holds only the value 0 | Until you next open a page on our site |
sf_attr | Static Forms | Remembers where your visit started, so that if you create an account we know which page, campaign, or website brought you to us. Before you allow analytics cookies, the first page of your visit is held only in your browser's memory: it is not stored or sent anywhere, and it is forgotten when you choose necessary cookies only or a page fully reloads. Written when you allow analytics cookies, and never overwritten during the visit | Session (deleted when you close your browser) |
sf_oauth_attr | Static Forms | Set when you click "Sign up with Google" on the sign-up page, so the same signup source information survives the redirect to Google and back | 5 minutes |
sf_attr and sf_oauth_attr are our own cookies. They hold only: the campaign tags in the page address (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the path of the page without its query string, the domain name of the external website that linked to it, if any, and the label agent-setup (ref) if you arrived through a setup link from a coding agent. Values that look like email addresses are dropped. They are only set if you allow analytics cookies, we ignore them if you have not, and they are deleted when you withdraw analytics consent. If you create an account while they are present, this information is saved with your account and sent to PostHog with your signup event, as described in our Privacy Policy.
The PostHog entries are set by PostHog's JavaScript library, which is part of our site's code. <project key> is our public PostHog project key, not anything about you. PostHog starts a new session ID after 30 minutes without activity, or after 24 hours. If you are not signed in, PostHog only loads after you allow analytics cookies. If you are signed in, PostHog loads as part of your account, as described in our Privacy Policy. If you are not signed in and withdraw analytics consent, PostHog stops capturing straight away and the ph_<project key> entries above are deleted from your browser.
3. Marketing Cookies (Optional)
These cookies are used to track visitors across websites for the purpose of displaying relevant advertisements. Currently, we do not use marketing cookies, but this category is included for future use and transparency.
Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. The third-party services we use include:
- Google Analytics - For website analytics.Privacy Policy
- Google reCAPTCHA - For spam protection on forms.Privacy Policy
- Stripe - For payment processing.Privacy Policy
- Vercel - For hosting.Privacy Policy
Managing Your Cookie Preferences
When you first visit our website, you will see a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your preferences at any time by clicking the "Cookie Settings" link in our website footer. While you are signed in, the banner is not shown and analytics run as part of your account; to opt out, contact us as described in our Privacy Policy. Signing in does not change the choice you made in the banner, and that choice applies again after you sign out.
You can also manage cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block cookies from specific sites
- Block all cookies
- Delete all cookies when you close your browser
Please note that blocking all cookies may affect your experience on our website, as some features may not work properly.
Browser-Specific Instructions
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we make significant changes, we will update the "Last updated" date at the top of this policy and may also notify you through a cookie consent banner prompt.
Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us:
- By visiting our contact page
- By email: info@staticforms.dev
