Last updated: March 14, 2026
Cookie Policy
FormGen uses essential cookies required for authentication and security, analytics cookies to help us understand how the Service is used, and advertising cookies to measure the effectiveness of our marketing campaigns.
What Are Cookies
Cookies are small text files that your browser stores on your device when you visit a website. Websites use cookies for various purposes, such as remembering your preferences, keeping you signed in, and protecting against security threats.
Cookies We Use
| Name | Duration | Type | Purpose |
|---|---|---|---|
authjs.session-token | 30 days | HttpOnly, Secure | Maintains your authenticated session |
authjs.csrf-token | Session | HttpOnly, Secure | Prevents cross-site request forgery attacks |
authjs.callback-url | Session | HttpOnly, Secure | Stores redirect URL during authentication flow |
fp_{formId} | 24 hours | HttpOnly, Secure, SameSite=lax, path-scoped to /f/{slug} | Verifies that a respondent has entered the correct password for a password-protected form. Signed with HMAC-SHA256 and bound to a fingerprint of the current form password, so rotating the password instantly invalidates every issued cookie. Only set on forms where the owner has enabled password protection. |
The cookies listed above are essential for the Service to function and cannot be disabled. The fp_{formId} cookie is only set when interacting with a password-protected form.
Analytics Cookies
We use Google Analytics to understand how visitors interact with the Service. This helps us identify areas for improvement and measure the effectiveness of new features. Google Analytics sets the following cookies:
| Name | Duration | Type | Purpose |
|---|---|---|---|
_ga | 2 years | Third-party | Distinguishes unique visitors |
_ga_* | 2 years | Third-party | Maintains session state for Google Analytics |
Analytics data is aggregated and does not personally identify you. Google Analytics processes this data in accordance with Google's Privacy Policy.
Advertising Cookies
We use Google Ads to measure the effectiveness of our advertising campaigns. Google Ads sets the following cookies via Google Tag Manager:
| Name | Duration | Type | Purpose |
|---|---|---|---|
_gcl_au | 90 days | First-party | Stores conversion data for Google Ads |
_gcl_aw | 90 days | First-party | Tracks ad click information for conversion attribution |
_gac_* | 90 days | First-party | Links Google Analytics data with Google Ads campaigns |
These cookies help us understand which ads lead to sign-ups and improve our advertising. Google processes this data in accordance with Google's Privacy Policy.
Local Storage
We use browser localStorage for the following purposes:
theme(persistent) — Stores your light or dark mode preference.formgen_cookie_notice_dismissed(persistent) — Tracks whether you have dismissed the cookie notice.
localStorage is not sent to our servers and remains entirely on your device.
Third-Party Cookies
Third-party services used by FormGen may set their own cookies:
- Google Analytics — Website usage analytics
- Google Ads — Advertising conversion tracking
- Stripe — During payment processing
- Google — During Google OAuth sign-in
- GitHub — During GitHub OAuth sign-in
These cookies are governed by the respective service's cookie policy.
Managing Cookies
You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent you from logging into FormGen.
Changes to This Policy
We may update this Cookie Policy from time to time. Changes are reflected in the "Last updated" date at the top of this page.
Contact
For questions about our cookie practices, contact us at [email protected]. See also our Privacy Policy.