Cookie Policy

Our cookie policy and how we use them

Last updated: March 15, 2026

This Cookie Policy explains how Aforo, Inc. ("Aforo," "we," "us," or "our") uses cookies and similar technologies when you visit our website, access the Aforo platform, or interact with our Storefront and Developer Portal. This policy should be read in conjunction with our Privacy Policy.

1. What Are Cookies

Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to site owners. We also use local storage and similar browser-based technologies, which function similarly to cookies.

2. Types of Cookies We Use

2.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. Without them, core features such as authentication, workspace routing, and secure billing operations would not work. You cannot opt out of these cookies.

Cookie / StoragePurposeDuration
sb-*-auth-tokenSupabase authentication session — maintains your login state and secures API requestsSession / 7 days
sb-*-auth-token-code-verifierPKCE code verifier for secure OAuth authentication flowsSession
aforo-cookie-consentStores your cookie consent preferences (localStorage)Persistent (until cleared)
next-localeStores your preferred language for the interface1 year
themeStores your preferred color theme (light/dark/system)1 year
__stripe_mid / __stripe_sidSet by Stripe for payment fraud prevention and secure checkout1 year / 30 minutes

2.2 Functional Cookies

These cookies enhance your experience by remembering choices you make beyond the essential settings above, such as dashboard layout preferences, recently viewed sections, and notification settings. These cookies do not track your activity across other websites.

2.3 Analytics Cookies

Analytics cookies help us understand how visitors interact with the Aforo platform by collecting information about page views, feature usage, navigation paths, and error rates. This data is aggregated and anonymized to help us:

  • Identify and fix usability issues
  • Measure the effectiveness of new features
  • Understand which platform areas are most valuable to users
  • Optimize the onboarding experience

These cookies are optional. You can enable or disable them via the cookie consent banner. When disabled, no analytics data is collected.

2.4 Marketing Cookies

Marketing cookies may be used to deliver relevant product information, measure the effectiveness of our campaigns, and personalize content based on your interests. These cookies may be set by our advertising partners and can track your activity across websites.

These cookies are optional. They are disabled by default and only activated if you explicitly opt in via the cookie consent banner.

3. Cookies on the Storefront and Developer Portal

If you operate a Storefront through Aforo, your End Customers may encounter the following cookies when accessing your branded portal:

  • Authentication cookies for End Customer login sessions
  • Payment-related cookies set by integrated payment processors (Stripe, Adyen, Razorpay) during checkout
  • Preference cookies for language and theme settings

As the operator of your Storefront, you are responsible for disclosing cookie usage to your End Customers in compliance with applicable regulations. Aforo provides customizable cookie consent mechanisms for Storefronts upon request.

4. Managing Your Cookie Preferences

When you first visit Aforo, a cookie consent banner will appear offering three options:

  • Accept all — enables all cookie categories including analytics and marketing
  • Necessary only — limits cookies to those required for the platform to function
  • Customize — opens a preferences panel where you can individually toggle analytics and marketing cookies

To reset your preferences at any time, clear your browser's local storage for this site (DevTools → Application → Local Storage → delete aforo-cookie-consent). The consent banner will reappear on your next visit.

5. Browser-Level Controls

Most modern browsers allow you to manage cookies through their privacy settings. You can:

  • Block all cookies or only third-party cookies
  • Clear existing cookies
  • Configure per-site cookie permissions
  • Enable "Do Not Track" signals (note: not all websites honor this signal)

Please be aware that blocking strictly necessary cookies will prevent you from logging in and using the Aforo platform.

6. Third-Party Cookies

Some cookies on our platform are set by third-party services that we integrate with. These include:

ProviderPurposePolicy
StripePayment processing, fraud detection, and secure checkoutStripe Privacy Policy
Google (OAuth)Social authentication ("Sign in with Google")Google Privacy Policy
SupabaseAuthentication and session managementSupabase Privacy Policy

We do not control cookies set by third parties. Please refer to their respective privacy policies for information about their practices.

7. Legal Basis for Cookie Use (GDPR)

Under the General Data Protection Regulation (GDPR) and the ePrivacy Directive, our legal basis for using cookies is:

  • Strictly necessary cookies: Legitimate interest — these are exempt from consent requirements as they are essential for the Service to function
  • Analytics and marketing cookies: Consent — these are only set after you actively opt in via the cookie consent banner

8. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our business practices. When we make significant changes, we will:

  • Update the "Last updated" date at the top of this page
  • Re-display the cookie consent banner so you can review and update your preferences
  • Where required, notify you via email about material changes

9. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Aforo, Inc.
Data Protection Officer
Email: privacy@aforo.ai
Website: https://aforo.ai