Cookies Policy
FopFo™ · Version 1.1.5 · Last updated 2026-07-20
1.1 What We Do Not Use
We want to be plain about tracking, because it matters. This Application does NOT use advertising, analytics or cross-site tracking cookies. It does NOT use "zombie cookies" (identifiers that silently respawn themselves after you delete them, for example via Flash/LSO, ETag or backup copies), "super cookies" (persistent identifiers injected at the network, HSTS or HTTP-header level), or hidden device fingerprinting to profile or follow you across sites or sessions. We do not sell data and we do not run third-party advertising or tracking scripts.
1.2.1 What We Use: Web Browser edition (Online)
In the current web (browser) edition the Application works using your browser's own local storage on your device — not tracking cookies. These items are strictly necessary to sign you in, keep you secure and remember your preferences, and they never leave your browser except your session token, which is sent to our server only to authenticate your requests. The items we store are: • suite_token — your signed-in session (authentication) token. • suite_device_token — an OPTIONAL "trust this device" token so you can skip the one-time code for up to 30 days on a device you choose; first-party and revocable at any time. • suite_known_device — a first-party token that lets us recognise a device you have used before so we can alert you when a NEW device signs in. It is used only for your login security, never for advertising or cross-site tracking. • suite_mfa_channel — your preferred one-time-code delivery choice (email or SMS). • suite_lang, suite_theme, suite_bg, suite_sidebar_collapsed, suite_zoom — your language, light/dark theme, background colour and layout preferences. • backup_dest, sync_interval — your chosen backup destination and automatic-sync schedule. • suite_support_session — for customer-support staff only, their support workspace session. • A small number of per-application display preferences (for example Family Tree sorting and milestone reminders, and one-time "tour seen" flags so guided tours do not repeat). To show your trusted devices with a friendly name (for example "Chrome on Windows"), we read the browser type and operating system your browser reports in its standard User-Agent header. This is used only to label devices in your own security list; it is not combined into a hidden fingerprint and is not used to track you.
1.2.2 What We Use: Standalone Application (downloadable) pending
The forthcoming native desktop and mobile editions do not run inside a web browser and therefore use no browser cookies and no web local storage at all. Equivalent settings — your preferences, and your trusted-device and session state — are held on your own device by the application itself, and your content can synchronise directly between your own devices. This edition is pending release; this section will be finalised when the downloadable application ships.
1.2.3 How We Categorise These Items
For transparency we rate every item we store into one of four categories. Because we run no advertising or third-party tracking, only the first two categories are actually in use today: • Strictly necessary (always on, cannot be disabled): suite_token (your session), suite_mfa_channel (code-delivery choice), suite_known_device (new-device security alerts), suite_support_session (support staff only), and the record of your cookie choices. • Functional (optional): suite_lang, suite_theme, suite_bg, suite_sidebar_collapsed and suite_zoom (your language, theme, background colour and layout), backup_dest and sync_interval (your backup and sync preferences), suite_device_token (the optional "trust this device" token), and per-application display preferences such as Family Tree sorting and "tour seen" flags. • Analytics (optional): none. We set no analytics or usage-measurement cookies. • Marketing (optional): none. We set no advertising, retargeting or cross-site marketing cookies.
1.2.4 Your Cookie-Choices Banner
Every visitor is shown a cookie-choices banner that labels these categories and lets you turn off all optional categories, keeping only the strictly-necessary ones. You may tick "Remember my choices for 30 days" to store your selection for that period; if you leave it unticked, your choice applies to the current visit only and the banner will appear again on your next visit.
1.3 Customer Control and Options
You are in control. In the web edition you may clear this local storage from your browser settings at any time — doing so simply signs you out and resets your preferences. You can revoke any trusted or recognised device at any time from the "Account & Security" screen, and you can change or withdraw your one-time-code delivery preference. Because we use only strictly-necessary storage, the Application cannot function if the session token is blocked; but no advertising or tracking state is ever set, so there is nothing to opt out of for marketing purposes.
1.4 Summary
In short: we use only strictly-necessary, first-party browser storage to run the service, keep your account secure and remember your preferences. We do not use zombie cookies, super cookies, cross-site cookies or device fingerprinting; we do not track you across other websites; and we do not sell your data. This Cookie Policy forms part of, and is governed by the same terms as, our Privacy Policy.
Your use or continued use of this site indicates your understanding and acceptance of our Cookies Policy.