Legal

Cookie Policy

Version 1.7, effective 24 October 2026 · History

In short

  • We store only what's needed to sign you in, remember your settings and credit an invite link you opened.
  • No advertising cookies, no tracking across websites, no analytics cookies.
  • Because of that, there's no cookie banner. If this ever changes, we'll ask first.

What we store

  • Sign-in session (browser storage, sb-…-auth-token): keeps you signed in. Necessary.
  • Appearance (theme, ui-style, icon-style): light or dark, the Glass or Tonal style, and app icons. Necessary to remember your choice.
  • Brand kit copy (brand:v1…): your brand kit for the current workspace, so tools open with it.
  • Workspace (forma:workspace, forma:workspace-name): which account you're working in (Personal or a business account) and its name. While a tab is open, session storage also keeps a switch in progress and the account you just made or joined (forma:space-arrive, forma:space-new).
  • Faster pictures (forma:signed:v1): temporary links to your own files, so they load from your browser's cache. Cleared when you sign out.
  • Work in progress (for example unfinished video renders, a saved signature for PDFs, a tool's last mode): so you don't lose work when you reload.
  • Recently used tools (forma:recent-tools): the tools you opened last, so Create shows them first. Only which tools, never what you made or typed.
  • Starting mode (forma:personal:v1): whether the Music and 3D studios open in Light or Pro for you, so they open right away. Cleared when you sign out.
  • Create's suggestions (forma:for-you:v1): the tools Create last suggested for you and why, so they show at once instead of moving the page. Cleared when you sign out.
  • Round trips between tools (session storage): remembers where to return when you move a picture from one tool to another.
  • Invite link (forma_ref, a cookie for up to 30 days): the code from a friend's invite link you opened, so your new account and your friend get the invite credits. Read once after you create an account, then deleted; never used to follow you anywhere else.
  • Small reminders (legal:recorded:…, migrated-to-supabase:v1, story:assistant): that you've seen the current terms, that work saved on this device was moved to your account, and whether a panel was open.

All of these stay in your browser and are only read by InksForm. You can clear them in your browser settings; you'll be signed out.

Websites you publish

InksForm doesn't add analytics, advertising or tracking to the sites you build. Pages load fonts from Google Fonts and scripts from jsDelivr, which receive your visitors' IP addresses; mention them in your site's privacy notice. If you add tools that need consent, such as analytics or ad pixels, asking your visitors for consent is your responsibility.