1. What cookies and local storage are
A cookie is a small text file that a website places in your browser. Your browser then sends it back to the server automatically on every later visit. That lets the server "remember" small things, such as the language you read the site in.
Local storage (localStorage) is a similar compartment in your browser, with one important difference: its contents are not sent to the server. They stay on your device and can only be read by scripts running on brightforgely.com. That is why almost everything lives there: your credit balance, your sign-in and your preferences. Entries have no expiry date and remain until you delete them (with the button further down, or in your browser settings).
In this policy we call both technologies "cookies" for short, because the same legal rules apply to each.
2. Exactly what we store
This is the complete list. Our site writes nothing else to your browser. Every entry starts with bfy_, so you can find them easily in your browser's developer tools.
| Name | Stored as | Purpose | Type | Duration |
|---|---|---|---|---|
bfy_lang | Cookie (first-party) | Remembers the language you picked so the server can send each page in that language. | Functional | 12 months |
bfy_lang | localStorage | A browser-side copy of your language choice, used by the page scripts. | Functional | Until you clear it |
bfy_users | localStorage | The optional accounts created in this browser: email, display name and a password hash. The hash never leaves your device. | Essential | Until you clear it |
bfy_user | localStorage | Keeps you signed in: which account is active, its display name and when it was created. | Essential | Until you clear it |
bfy_credits | localStorage | Your virtual-credit balance. Without it every game would restart at 1,000 credits. | Essential | Until you clear it |
bfy_age_ok | localStorage | Records that you confirmed you are 18 or older, so the 18+ strip does not reappear on every page. | Essential | Until you clear it |
bfy_cookies | localStorage | Your answer on the cookie card: "1" (OK) or "0" (essential only). | Essential | Until you clear it |
bfy_free_refill_used | localStorage | Notes that the one-time free top-up of 500 credits has been used. | Essential | Until you clear it |
bfy_unsub | localStorage | A local copy of any unsubscribe or deletion request you sent from the Unsubscribe page. | Essential | Until you clear it |
Essential entries are needed for the games and your account to work at all. Functional entries are about comfort: without them the site would still work, but it would fall back to English on every visit.
About accounts: if you register, bfy_users holds your email, display name and a password hash. Neither the password nor its hash is ever sent to the server. The server only receives your email address, a timestamp and a hashed IP address, so we can keep the account list and handle unsubscribe requests. The details are in our Privacy Policy.
3. What we do not use
- No analytics tools (no Google Analytics, no third-party traffic measurement).
- No advertising, remarketing or affiliate cookies.
- No tracking pixels, no browser fingerprinting, no profiling.
- No social-media buttons that send data about you to other companies.
- No selling or sharing of data for marketing.
If we ever wanted to add any of these, we would update this policy first and ask for your fresh consent. Without it, nothing of the kind would be switched on.
4. Third parties
Google Fonts
We load the Bricolage Grotesque and Outfit typefaces from Google's servers (fonts.googleapis.com and fonts.gstatic.com). Google sets no cookies for this, but as with any file download, it receives your IP address and basic browser details. See Google's privacy policy.
Cloudflare
Our site may be protected and accelerated by the Cloudflare network, acting as our processor. When it is active, it may set these security cookies:
| Name | Stored as | Purpose | Type | Duration |
|---|---|---|---|---|
__cf_bm | Third-party (Cloudflare) | Set by Cloudflare, if present, to tell people from automated bots. Contains no identifier we can read. | Essential | 30 minutes |
cf_clearance | Third-party (Cloudflare) | Set only if you pass a Cloudflare security check, so you are not asked again straight away. | Essential | 30 minutes by default (set by the security check) |
They exist only to protect the site from attacks and bots. They are not used for tracking, and we cannot see what they contain.
5. Legal basis
Under Section 89(3) of Czech Act No. 127/2005 Coll. on Electronic Communications (which implements the EU ePrivacy Directive), no consent is needed to store information that is strictly necessary to provide a service you have explicitly asked for. All of our entries fall into that category. We still show the cookie card so that you know about the storage and stay in control of it.
Because we use no optional cookies today, both buttons on the card ("OK, got it" and "Essential only") have the same practical effect. We still record your choice so we can respect it if we ever add something optional. Where entries contain personal data (the email on an account), we process it under Art. 6(1)(b) and (f) GDPR.
6. Change your choice or delete everything
The first button reopens the cookie card so you can choose again. The second removes every entry starting with bfy_ from this browser, plus the bfy_lang cookie. To prevent accidents, you need to click it twice.
What happens afterwards: you are signed out, your balance goes back to 1,000 credits, the 18+ strip and the cookie card appear again on your next visit, and pages show in English until you pick a language again. An account registered on our server is not deleted this way; you can ask for that on the Unsubscribe page or by email.
7. Browser settings
You can also view, block or delete cookies and site data at any time in your browser itself. The makers' guides:
If you block storage for brightforgely.com completely, pages will still load, but the games will not remember your balance and signing in will not work.
8. Changes and contact
We update this policy whenever what we store changes. The date of the last change is always shown at the top. Questions about cookies or data protection go to [email protected]. The operator is [OPERATOR LEGAL NAME], Company ID (IČO) [IČO / COMPANY ID], registered office: [REGISTERED OFFICE ADDRESS], Czech Republic.