Cookie Policy

Effective date: 2026-08-03

Plain-English summary. We use a handful of strictly necessary cookies and browser storage entries to keep you signed in, remember whether you chose light or dark, and remember that you answered the cookie banner. We run no analytics, advertising, or tracking cookies. Paddle sets its own cookies inside the checkout overlay when you buy.

1. What a cookie is

A cookie is a small text file a site stores in your browser. We also use two related browser technologies — localStorage and sessionStorage — which work like cookies but are not transmitted with every request. Where this policy says "cookie", it covers all three.

2. Cookies we use

Strictly necessary

These are required for the site to work. They cannot be switched off, and under the EU ePrivacy Directive and the UK PECR they do not require consent.

Name	Type	Purpose	Lifetime
jf-theme	localStorage	Remembers your light/dark choice so the page does not flash on load	Until cleared
openfactoryai-cookie-consent	localStorage	Records that you answered the cookie banner, and which option you chose	Until cleared
Firebase auth tokens (firebase:authUser:*)	localStorage / IndexedDB	Keeps you signed in to your account	Until sign-out
__session, __Host-*	Cookie	Session integrity and CSRF protection on authenticated requests	Session, or up to 14 days

Functional

None. We do not set any optional functional cookies.

Analytics

None. We do not run Google Analytics, or any other analytics or product-analytics cookie, on openfactoryai.co. Aggregate traffic is measured from server logs, which are described in §2 of the Privacy Policy and retained for 90 days.

Advertising and marketing

None. We do not run advertising, retargeting, conversion-pixel, or social-tracking cookies. We do not share browsing data with ad networks.

3. Third-party cookies

Paddle. When you open the checkout to buy or manage a subscription, Paddle — our merchant of record — loads its checkout overlay and sets its own cookies in that context. These are necessary for the payment to complete and for Paddle's fraud prevention. They are governed by Paddle's privacy policy, not by this one. They are only set when you open a checkout.

Google (Firebase). Authentication and hosting are provided by Google. Signing in with a Google account involves cookies set by Google on Google's own domains during that flow, governed by Google's privacy policy.

Embedded content. Pages that embed a third-party tool or video may allow that provider to set cookies once you interact with the embed.

We do not control third-party cookies and cannot set or clear them on your behalf.

4. Your choices

The banner. On your first visit you are asked to accept all cookies or essential only. Because we currently run only strictly necessary cookies, both options have the same runtime effect today — recording your answer proves consent and gives us the switch we would need if we ever added an optional cookie.

Change your mind. Use the Cookie preferences link in the site footer. It clears your recorded choice and re-prompts.

Your browser. Every major browser lets you block or delete cookies and clear site storage. Blocking strictly necessary cookies will sign you out and may break checkout.

openFactory the desktop app does not use advertising or tracking cookies at all. Diagnostic telemetry inside the application is a separate, opt-in setting described in §2 of the Privacy Policy.

5. Do Not Track

There is no industry consensus on how to interpret a Do Not Track signal, so we do not respond to it differently. Since we run no tracking cookies, the outcome you want is already the outcome you get.

6. Changes to this policy

If we add a cookie category, we will update this table and re-prompt for consent before setting anything non-essential. The date at the top of this page changes with any update.

7. Contact

Questions about cookies: privacy@kalmantic.com.

Kalmantic Inc. operates OpenFactoryAI and openFactory. This policy was last updated on 2026-08-03.