CrewsForge — Cookie Policy

Last updated: 11 Jan 2026

Effective date: 12 Jan 2026

This Cookie Policy explains how Ryomen Corporation, a Wyoming corporation ("CrewsForge", "we", "us"), uses cookies and similar technologies on [crewsforge.com] and the CrewsForge web application (together, the "Platform").

This Policy is part of, and should be read together with, our Privacy Policy and Terms of Service.

1. What Cookies Are

A cookie is a small text file placed on your device by a website. Cookies allow a site to recognise your browser, remember your preferences, keep you signed in, and understand how the site is used.

We also use technologies that behave like cookies and are covered by this Policy:

Local storage and session storage — browser storage used to hold session state and interface preferences.
Pixels and tracking beacons — small images or scripts used to record that a page or email was opened.
Software development kits (SDKs) — code embedded by third-party services we integrate.
Device fingerprinting signals — technical attributes (browser, timezone, screen) used by our payment processor for fraud prevention.

Throughout this Policy, "cookies" means all of the above.

First-party cookies are set by CrewsForge. Third-party cookies are set by services we integrate, such as our payment processor. Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them.

2. Why We Use Cookies

We use cookies to:

keep you signed in and maintain your session across pages;
protect your account and the Platform against fraud, credential stuffing, and abuse;
remember interface preferences such as language and theme;
process payments securely and detect fraudulent transactions;
understand how Founders and Teams move through the Platform, so we can identify where the product is confusing or broken;
measure the effectiveness of our marketing, where you have consented.

3. Categories of Cookies We Use

3.1 Strictly necessary cookies

These are required for the Platform to function. Without them you cannot sign in, fund a Milestone, or use the Dispute flow. They cannot be switched off through our consent banner, and under EU and UK law they do not require your consent.

Purpose	Examples	Type	Retention
Authentication and session management	`[cf_session]`, `[cf_refresh]`	First-party	[Session / 30 days]
Security, CSRF protection, bot mitigation	`[cf_csrf]`	First-party	[Session]
Load balancing and routing	`[cf_lb]`	First-party	[Session]
Recording your cookie choices	`[cf_consent]`	First-party	[12 months]
Payment processing and fraud prevention	Stripe (`__stripe_mid`, `__stripe_sid`)	Third-party	[1 year / 30 minutes]

3.2 Functional cookies

These remember choices you make and improve your experience. Disabling them will not break the Platform, but some conveniences will be lost.

Purpose	Examples	Type	Retention
Language and locale preference	`[cf_locale]`	First-party	[12 months]
Interface preferences (theme, layout, dismissed hints)	`[cf_ui]`	First-party	[12 months]
Support chat continuity	`[PROVIDER]`	Third-party	[PERIOD]

3.3 Analytics cookies

These help us understand how the Platform is used in aggregate — which steps of the funnel are completed, where users drop off, and which features go unused. We use this to improve the product, not to build advertising profiles.

Purpose	Examples	Type	Retention
Product and funnel analytics	`[PROVIDER — e.g. PostHog / Plausible]`	[First / Third]-party	[PERIOD]
Error and performance monitoring	`[PROVIDER — e.g. Sentry]`	Third-party	[PERIOD]

3.4 Marketing cookies

These are used to measure the performance of our campaigns and, in some cases, to show you relevant content on other sites.

Purpose	Examples	Type	Retention
Campaign attribution	`[PROVIDER]`	Third-party	[PERIOD]
Advertising and retargeting	`[PROVIDER]`	Third-party	[PERIOD]

Current status: [We do not currently run advertising or retargeting cookies. If we begin to, this Policy will be updated and consent will be requested before any such cookie is set.]

4. Third Parties That Set Cookies Through the Platform

We do not control cookies set by third parties. Their use of data is governed by their own privacy policies.

Provider	Role	Categories	Policy
Stripe, Inc.	Payment processing, fraud prevention	Strictly necessary	[stripe.com/privacy]
[Analytics provider]	Product analytics	Analytics	[LINK]
[Error monitoring provider]	Error and performance monitoring	Analytics	[LINK]
[Support chat provider]	Customer support	Functional	[LINK]
[CDN / security provider]	Delivery, bot mitigation	Strictly necessary	[LINK]

5.1 EEA, UK, and Switzerland. We rely on the ePrivacy Directive as implemented locally, together with the GDPR / UK GDPR. Strictly necessary cookies are set on the basis of our legitimate interest in operating a secure service. All other cookies are set only after you give consent through our cookie banner.

5.2 United States. Where state privacy laws (including the CCPA/CPRA in California) apply, we honour opt-out rights as described in Section 7. [We do not sell personal information, and we do not share it for cross-context behavioural advertising.]

5.3 Withdrawal. You may change or withdraw your consent at any time — see Section 6. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6.1 On the Platform. Use the "Cookie settings" link in the site footer, or the banner shown on your first visit, to accept, reject, or configure non-essential cookies by category. Rejecting is as easy as accepting.

6.2 In your browser. Most browsers let you block or delete cookies:

Chrome: Settings → Privacy and security → Third-party cookies
Safari: Settings → Privacy
Firefox: Settings → Privacy & Security
Edge: Settings → Cookies and site permissions

Blocking strictly necessary cookies will prevent you from signing in and using core Platform features.

6.3 Global Privacy Control. We honour the Global Privacy Control (GPC) signal where transmitted by your browser and where required by applicable law. We do not currently respond to legacy "Do Not Track" headers, as no common standard for them exists.

6.4 Clearing existing cookies. Withdrawing consent stops new cookies from being set; it does not automatically delete cookies already stored. Clear them through your browser.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of personal data collected via cookies, to receive that data in a portable form, and to opt out of its sale or sharing.

To exercise these rights, contact support@crewsforge.com. We will not discriminate against you for exercising them. Full details are in our Privacy Policy.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Data Transfers and Retention

Cookie data may be processed in the United States, the European Union, and by our providers in other countries. Where personal data is transferred out of the EEA or UK, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

Retention periods for each cookie are stated in the tables above. Aggregated analytics data that can no longer be linked to you may be retained indefinitely.

9. Changes to This Policy

We may update this Policy when our cookie use changes. The "Last updated" date at the top reflects the most recent version. If we introduce a new category of non-essential cookies, we will ask for your consent again before setting them.

10. Contact

Ryomen Corporation

30 N Gould St #66355

Sheridan, WY 82801, USA

General: support@crewsforge.com

This document is a drafting template prepared for CrewsForge and is not legal advice. The cookie tables must be completed from an actual technical audit of the deployed Platform before publication, and the Policy reviewed by qualified counsel.