Cookie Policy
Last updated October 1, 2026
frwd2 uses only cookies and browser storage that are strictly necessary to sign you in, keep the service secure and show you the right buttons once you are signed in, plus one setting you choose yourself: the light or dark theme. We don't use advertising cookies, cross-site tracking or third-party analytics, which is why you won't see a cookie banner. If you buy a plan, the payment form comes from Razorpay, which sets its own cookies to take the payment.
What we use
| Name | Type | Where | Purpose | Duration |
|---|---|---|---|---|
frwd2_oauth_state | Cookie (HttpOnly) | API | Protects "Continue with Google / GitHub" sign-in against forged requests | 10 minutes, deleted after sign-in |
frwd2.refreshToken | Local storage | Dashboard | Keeps you signed in between visits. Removed when you log out. | Up to 7 days, renewed while you use the dashboard |
frwd2_signed_in | Cookie | Set by the dashboard, read by the website | Notes that this browser is signed in, so the website shows "Go to dashboard" instead of "Log in". It contains no account details and can't be used to sign in. Removed when you log out. | Up to 7 days, renewed while you use the dashboard |
frwd2.deviceId | Local storage | Website and dashboard | A random ID for your browser. It lets us limit abuse per browser as well as per IP address, keep one sign-in per browser in your list of devices, and give you the same short link when you shorten an address again without an account. It isn't built from anything about your device. | Until you clear it |
frwd2.pendingClaim | Local storage | Dashboard | Set only if you press "Claim & track" on a link you shortened without an account. It holds that link's ID and claim code while you sign up or log in, so the link can be added to your account. | Until the link is added to your account, or 3 days |
frwd2-theme | Local storage | Website and dashboard | Remembers that you chose the light theme. Not set unless you switch themes. | Until you clear it |
| Razorpay's cookies | Cookie | Set by Razorpay in its payment form | Processing your payment and preventing fraud, only while you are paying for a plan | Set by Razorpay |
__cf_bm, cf_clearance | Cookie | Set by Cloudflare when needed | Bot and abuse protection | 30 minutes to 1 year, set by Cloudflare |
Anonymous visitors to frwd2.in and people who open short links don't get any frwd2 cookies. If you are signed in, your browser sends the frwd2_signed_in cookie with requests to frwd2.in, short links included; we don't record it. On the website the browser ID is stored only once you shorten a link, and the theme choice only if you press the theme button; the theme choice never leaves your browser. Cloudflare may set its security cookies on any request it needs to protect.
Managing cookies
You can block or delete cookies and site data in your browser settings. Because we only use necessary storage, blocking it will stop sign-in from working and may cause Cloudflare to ask you to complete a challenge.
Changes
If we ever add non-essential cookies, such as analytics, we'll update this page and ask for your consent first where the law requires it.
Contact
Questions? Email privacy@frwd2.in. See also ourPrivacy Policy.