FormGoat Cookie Policy
This English version is the governing version of this Policy. Translations into other languages are provided for convenience only; in the event of any discrepancy, this version prevails (section 5).
The FormGoat DS-160 Desktop App does not use browser cookies. The Chrome Extension does not use site cookies.
1. What cookies and local storage are
A cookie is a small text file which a website stores in your browser and receives on your next visit.
localStorage / sessionStorage are analogous mechanisms for storing data in the browser without transmitting it to the server with each request. Under the guidance of EU regulators (EDPB) they are subject to the same disclosure requirements as cookies.
We use these mechanisms in order to operate the Service, to remember preferences and to collect usage statistics.
2. Consent management
formgoat.ai and PDF Goat use iubenda, a consent management service. On your first visit iubenda displays a banner allowing you to accept or reject the optional categories. Optional cookies and analytics tools are activated only after your consent — until consent is given they are blocked automatically. Your choice is recorded and retained as evidence of consent (Article 7(1) GDPR).
Analytics tags are loaded by Google Tag Manager; it does not itself set cookies and is activated under the same consent logic.
3. Categories
3.1. Strictly necessary
Necessary for the operation and protection of the Service. No consent required.
| Storage | Key | Purpose | Duration |
|---|---|---|---|
| Cookie (iubenda) | _iub_cs-* | Storage of your cookie choices | 1 year |
| Cookie (CDN) | __cf_bm | Protection against bots and automated abuse | 30 minutes |
| Cookie (CDN) | cf_clearance | Record that a security check has been passed | up to 1 year |
| sessionStorage | (internal) | Session token after sign-in; cleared when the tab is closed | Browser session |
| localStorage | (internal) | User ID and authorisation token | Until sign-out or clearing |
The site operates through a content delivery network which processes technical connection data (including your IP address) for protection against attacks — see sections 5 and 6 of the Privacy Policy.
3.2. Functional
Set after consent.
| Storage | Key | Purpose | Duration |
|---|---|---|---|
| localStorage | fg_lang | Retention of the chosen interface language | Until cleared |
3.3. Analytics
Set only after consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishing users (pseudonymised ID) | 2 years |
_ga_* | Google Analytics 4 | Analytics session state | 2 years |
_gid | Google Analytics 4 | Distinguishing users within a 24-hour period | 24 hours |
Analytics cookies process pseudonymised identifiers, which under EU law constitute personal data. GA4 does not store IP addresses. Google Analytics entails a transfer of data to Google (USA) — the legal safeguards for the transfer (SCC) are described in the "International transfers" section of the Privacy Policy.
We use no advertising or profiling cookies: there is no behavioural advertising or retargeting on formgoat.ai.
3.4. Third-party cookies
Signing in via Google Sign-In (accounts.google.com), or visiting Stripe payment pages, may result in cookies of those services being set in accordance with their own privacy policies.
4. Managing your choices
4.1. Through iubenda
Your consent may be changed or withdrawn in the iubenda panel, which is opened by the "Cookie settings" link in the footer of the site. Withdrawing consent is as easy as giving it (Article 7(3) GDPR); following withdrawal, optional cookies are deleted or cease to be set.
4.2. Through your browser
- Chrome: Settings → Privacy and security → Cookies
- Safari: Settings → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Privacy, search and services
Disabling strictly necessary items will impair the operation of the Service (signing in will not be possible).
4.3. Opting out of Google Analytics
Install the Google Analytics Opt-out add-on.
5. Changes to this Policy
Where changes are made, we will update this Policy and, where necessary, request consent again through iubenda.
This Policy may be translated into other languages for convenience. In the event of any discrepancy, this English version prevails, except where mandatory rules require interpretation in the consumer's language.