Cookie Policy

1. Introduction

This Cookie Policy explains how CloudForge Solutions sp. z o.o. ("CloudForge", "we", "us", or "our") uses cookies and similar tracking technologies when you visit cloudforge.solutions (the "Website"). It should be read in conjunction with our Privacy Policy.

Cookies are small text files that are placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites function correctly, improve performance, and provide information to website operators.

There are two primary classifications of cookies by lifespan: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you manually delete them.

Cookies may also be classified by origin: First-party cookies are set by the website you are visiting (in this case, cloudforge.solutions). Third-party cookies are set by a domain other than the website you are visiting, typically by external services embedded in the page (such as analytics or security providers).

2. Cookies We Use

The following table lists all cookies used on the Website, organized by category. Essential cookies are always active; all other categories require your consent.

3. Essential Cookies

Essential cookies are strictly necessary for the Website to function properly. They enable core functionality such as security, session management, and network management. These cookies cannot be disabled without significantly impacting your ability to use the Website.

These cookies enable core features such as secure login, session management, form submission protection, and language preference storage. Without these cookies, the Website cannot provide the basic services you have requested. Essential cookies are set by CloudForge and cannot be disabled through our cookie preference centre. Examples include session identifiers, CSRF tokens, and content delivery network cookies required for page loading performance.

Cloudflare cookies (__cf_bm and cf_clearance) are required to protect the Website from malicious traffic, bot attacks, and denial-of-service attempts. They do not track you across websites or collect personal data for advertising purposes.

The session_id cookie maintains your browsing session so that the Website functions correctly as you navigate between pages. It is deleted when you close your browser.

4. Analytics Cookies

We use Google Analytics 4 (GA4) to understand how visitors interact with our Website. Analytics cookies help us measure page views, navigation paths, session duration, device types, and geographic regions (country-level only).

These cookies help us understand visitor patterns, traffic sources, and content engagement. We also use Plausible Analytics, a privacy-focused analytics platform that does not use personal identifiers or cross-site tracking. All Plausible analytics data is aggregated and stored on EU-based servers. Plausible tracks page views, referral sources, browser type, device type, and geographic region at the country level only — without setting any cookies.

Important: We have enabled IP anonymization in our Google Analytics configuration. This means your full IP address is never stored by Google. The last octet of your IPv4 address or the last 80 bits of your IPv6 address are set to zero before any storage or processing takes place.

Data collected through analytics cookies is aggregated and anonymized. It is used solely to improve Website content, navigation, and performance. We do not use analytics data to identify individual visitors.

You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout), which instructs your browser to prevent Google Analytics JavaScript from sending data to Google.

5. Functional Cookies

Functional cookies enhance your experience by remembering choices you make on the Website. They are not strictly necessary for the Website to function, but disabling them means your preferences will not persist between visits.

The mode_preference cookie stores your selected audience mode (startup, midmarket, or enterprise) so that relevant content is displayed when you return. The locale cookie stores your preferred language setting to serve content in your chosen language.

These cookies collect anonymous information about how you use our Website to help us improve your experience. All information collected by functional cookies is used solely on this Website, is not aggregated with data from other sources, and is not shared with third parties. Functional cookies do not collect information that could be used to identify you personally.

6. Marketing Cookies

CloudForge does not currently use marketing cookies. We do not use retargeting pixels, social media tracking scripts, or advertising identifiers.

If we introduce marketing or advertising cookies in the future, this policy will be updated and you will be prompted to provide or update your consent before any marketing cookies are set. Such cookies would only be activated after you have given explicit, informed consent through our cookie preference centre.

7. Third-Party Cookie Disclosure

Certain cookies on the Website are set by third-party services that we have integrated to provide specific functionality. Below is a disclosure of each third-party service, the cookies it may set, and their respective retention periods.

Vercel — We use Vercel for hosting and performance analytics. Vercel may set the _vercel_speed_insights cookie to measure page load times, time to first byte, cumulative layout shift, and other Core Web Vitals metrics. This cookie is retained for the duration of your session only and is deleted when you close your browser. Performance data is retained by Vercel for 30 days and is not shared with additional third parties.

Plausible Analytics — We use Plausible Analytics as a privacy-focused web analytics platform. Plausible does not set cookies by default. It uses privacy-compliant page view tracking without personal identifiers, IP addresses, or cross-site tracking. All data is processed on EU-based servers in compliance with GDPR requirements.

LinkedIn Insight Tag — If applicable, the LinkedIn Insight Tag may be used to measure conversion from LinkedIn advertising campaigns. It may set the bcookie and lidc cookies, which are retained for up to 1 year. You may disable LinkedIn cookies through your cookie preferences or directly through your LinkedIn account privacy settings.

HubSpot — If applicable, HubSpot may be used for contact form and CRM integration. HubSpot may set the __hstc and hubspotutk cookies, which are retained for up to 13 months. These cookies are required only if you submit a contact form and are used solely to track form submissions and provide customer support.

CloudForge does not sell, trade, or transfer your personal information to third parties. Third-party cookies listed above are used solely for the purposes described and are subject to the respective providers' privacy policies.

8. Data Retention Periods

The retention period for cookie data varies depending on the category and purpose of each cookie. The following outlines our data retention practices by cookie category:

• Essential cookies — Session cookies are deleted when you close your browser. Persistent essential cookies (such as security clearance tokens) are retained for up to 30 minutes or 12 months for persistent preferences, depending on their specific function.
• Performance cookies — Data collected through performance cookies (such as Vercel Speed Insights) is retained for 30 days. The cookies themselves expire at the end of your browsing session.
• Analytics cookies — Google Analytics cookies are retained for up to 2 years. Plausible Analytics does not set cookies and retains aggregated, anonymous data only. No personal data is stored by either analytics provider beyond the stated retention period.
• Functional cookies — Preference cookies (mode_preference, locale) are retained for 1 year from the date they are set or last updated. They are automatically deleted after this period, and you will be asked to set your preferences again.
• Marketing cookies — Not currently in use. If introduced in the future, retention periods will be disclosed before any marketing cookies are activated.

9. International Data Transfers

CloudForge Solutions sp. z o.o. is incorporated in Poland and operates under the General Data Protection Regulation (GDPR). Where data is processed by third-party services located outside the European Economic Area (EEA), such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or by the service provider's participation in an approved data transfer framework.

Specifically, Google LLC (provider of Google Analytics) processes data in the United States under Standard Contractual Clauses and additional technical safeguards including encryption in transit and at rest. Vercel Inc. processes performance data under similar contractual protections. Plausible Analytics processes all data exclusively within the European Union.

For UK visitors, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply. The same transfer safeguards described above apply to data processed in connection with UK visitors. The UK Information Commissioner's Office (ICO) has approved Standard Contractual Clauses as a valid transfer mechanism under UK data protection law.

We regularly review our third-party data processing agreements to ensure continued compliance with applicable data protection regulations and to verify that adequate safeguards are maintained for all international data transfers.

10. How to Control Cookies

Most web browsers allow you to manage cookies through their settings. You can typically find cookie controls in your browser's "Settings," "Preferences," or "Privacy" menu. The specific steps vary by browser:

• Google Chrome — Settings > Privacy and Security > Cookies and other site data. You can block third-party cookies, clear existing cookies, and manage site-specific cookie permissions from this panel.
• Mozilla Firefox — Settings > Privacy & Security > Cookies and Site Data. Firefox also offers Enhanced Tracking Protection, which blocks known third-party tracking cookies by default in Standard mode.
• Apple Safari — Preferences > Privacy > Manage Website Data. Safari blocks cross-site tracking cookies by default through Intelligent Tracking Prevention (ITP).
• Microsoft Edge — Settings > Cookies and site permissions > Manage and delete cookies. Edge provides options to block third-party cookies and clear cookies on browser close.

11. Consent Management

When you first visit the Website, only essential cookies are activated by default. You will be presented with a cookie consent banner that allows you to accept or decline non-essential cookie categories (analytics and functional).

You may update your cookie preferences at any time through the cookie preferences link in the Website footer. Changes take effect immediately: declining a category will prevent those cookies from being set on future page loads, and existing cookies in that category will expire according to their normal schedule.

Your consent preferences are stored locally and are not transmitted to our servers. If you clear your browser cookies, you will be asked to provide consent again on your next visit.

12. Impact of Disabling Cookies

The impact of disabling cookies varies by category:

• Essential cookies — Disabling these may cause parts of the Website to function incorrectly. Security features may not work, and your session may not be maintained as you navigate between pages. We strongly recommend keeping essential cookies enabled.
• Analytics cookies — Disabling analytics cookies has no impact on your browsing experience. The Website will function identically. We simply will not receive anonymized usage data from your visits.
• Functional cookies — Disabling functional cookies means your audience mode preference and language selection will not persist between visits. You may need to reselect your preferences each time you visit the Website.

13. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in technology, or changes in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. If we add new categories of non-essential cookies, we will request your consent before activating them, regardless of any prior consent preferences.

14. Contact and Data Protection Rights

If you have questions about our cookie practices or wish to exercise your data protection rights, contact our Data Protection contact at: privacy@cloudforge.solutions. You may also write to: CloudForge Solutions sp. z o.o., ul. Sienna 75/21, 00-833 Warszawa, Poland.

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to the processing of your personal data. To exercise these rights, please contact us using the details above. We will respond to your request within 30 days of receipt, as required by applicable law.

You also have the right to lodge a complaint with a supervisory authority. For visitors in Poland, the relevant authority is the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych, UODO). For visitors in the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).

This Cookie Policy should be read alongside our Privacy Policy and Terms of Service, which together govern your use of the Website.