Cookies
Last updated: 28 October 2026
We use cookies and similar browser storage for two purposes only: to keep the site working and you signed in, and — if you agree — for analytics. No advertising cookies, no cross-site tracking.
Essential
These keep you signed in, keep the site secure, and remember what you were doing. They are always on, because the Service does not work without them.
| Name | Type | What it does | Lifetime |
|---|---|---|---|
| phorm_session | cookie (httpOnly) | keeps you signed in | 15 days, or until you sign out |
| phorm_google_cid | local storage | configuration for Sign in with Google | until you clear site data |
| g_state | cookie, set by Google Sign-In | remembers whether you closed the Google sign-in prompt | up to 6 months |
| Cloudflare security cookies (for example __cf_bm) | cookie, set by Cloudflare | protect the site from bots and abuse; set only when needed | up to 30 minutes |
| phorm_consent | local storage | remembers your choice in the cookie banner | 12 months |
| phorm_internal | cookie | marks our own team's visits so they are left out of the analytics; set only by a link we use ourselves or when a member of our team is signed in | 1 year |
| phorm_studio_v1, phorm_active_jobs | local storage | restore the studio and a running generation after you reload the page | 24 hours for the studio, until the generation ends for the job; both cleared when you sign out |
| phorm_plate:<model> | local storage | remembers how objects are arranged on the plate for a model | 30 days |
| phorm_lettering | local storage | remembers the models for which you answered the offer to put your photo's lettering on the model, so it is not asked again | until you sign out; each entry at most 30 days |
| phorm-theme, phorm_printer | local storage | remember your theme and your last choice of printer | until you clear site data |
| phorm_print_checked, phorm_notice_dismissed, phorm_before_checkout, phorm_pack_checkout | session storage | remember that you have seen a notice or finished a step, so it is not shown again — and, after you pay for a model pack, that its models can be announced once they arrive | until you close the tab (the pack's note: at most a day) |
| phorm_bell | local storage | remembers which notifications you have read or closed, and when a notice about your balance first appeared | until you sign out; each entry at most 60 days |
| phorm-chunk-reload-at | session storage | reloads the page once if a site update interrupted it | until you close the tab |
| phorm_ref, phorm_promo, phorm_ref_new | local storage | keep an invitation or promo code you followed until you create an account | until you create an account, 30 days at most |
| phorm_ref_strip | session storage | remember that you closed the notice of a code you followed | until you close the tab |
Analytics
Google Analytics 4 and PostHog help us see which pages are used, where the site gets in people's way, and where errors happen. PostHog can also record how a visit goes — pages, clicks, and scrolling — with your photos, models, email address, and everything you type hidden. In the EU, the EEA, the UK, and Switzerland these cookies are set only after you agree in the consent banner; declining changes nothing about how the site works for you.
| Name | Type | What it does | Lifetime |
|---|---|---|---|
| _ga | cookie, Google Analytics | distinguishes visitors | up to 2 years (some browsers, such as Chrome, cap this at 400 days) |
| _ga_KFWYVDKV6J | cookie, Google Analytics | keeps the state of a visit | up to 2 years (some browsers, such as Chrome, cap this at 400 days) |
ph_<project key>_posthog |
cookie and local storage, PostHog | distinguishes visitors and visits | 1 year |
ph_<project key>_window_id, ph_<project key>_primary_window_exists |
session storage, PostHog | keep the recording of a visit to its own tab | until you close the tab |
__ph_opt_in_out_<project key> |
local storage, PostHog | remembers that you declined, if you did so while PostHog was running | until you clear site data |
| phorm_first_touch | local storage | remembers how you first came to the site — the link's tags (such as utm_source) and the domain of the website that sent you — until you create an account | until you create an account, at most 90 days |
We also use Cloudflare Web Analytics, which counts page views without setting cookies or identifying you.
Change your choice
You can give or withdraw consent at any time with the "Cookie settings" link at the bottom of every page. You can also clear cookies and site data in your browser settings — the site will then treat you as a new visitor.
More about what data we process and why: /privacy/.