×Cookies and device storage
Updated: 27 October 2026
Scope
This notice describes cookies and local storage used by Forma, provided by Unkredible Studios, VAT no. IT12700380012. See the privacy notice for personal data and your rights. Contact info@unkredible.com.
Sign-in cookies
The first-party technical cookie forma_session keeps you signed in for up to 90 days. Signing out or resetting your password revokes the session. It uses HttpOnly, Secure in production and SameSite=Lax protection. It contains no password and is not used for advertising. The legacy forma_access cookie may remain during the private-access migration; it is not issued to new accounts and is removed at sign-out. Blocking or deleting sign-in cookies requires you to sign in again.
Preferences and installation
The local key forma-wardrobe-view stores your list or grid preference until you change it or clear site data. The forma_language cookie stores your manually selected Italian or English language for up to one year. Without it, the country inferred locally from your IP selects the language, falling back to your browser language if unavailable. Installation adds a device icon. The service worker stores public resources for the offline page; it does not cache personal photos, wardrobe, lookbook or private API responses offline.
Analytics and advertising
Forma uses internal aggregate statistics to improve the service: landing and pricing views, broad referral categories, language, plan clicks and checkouts started. There are no analytics cookies, visitor identifiers, fingerprinting, session recordings or advertising services. Statistics contain no IP addresses, full URLs, emails, photos or body data. Counters are stored on our server for up to 90 days. Requests technically transmit an IP address to the server, used temporarily for abuse prevention; security logs, if any, are separate. Do Not Track and Global Privacy Control are respected for browsing statistics. Account, garment, outfit and paid-period totals are computed as aggregates from operational service records. The legal basis for minimised internal statistics is our legitimate interest in improving the service; contact us to object. We do not reconstruct individual journeys from visits to purchases.
External pages and services
Loading Google Fonts sends requests to Google servers. Opening Stripe checkout or plan management may use Stripe’s own cookies and tools for security, fraud prevention and payment. Those pages are also governed by Stripe’s notices. AI, weather and geographic requests are described in the privacy notice and are not in themselves advertising cookies.
Managing local data
View, block or delete cookies and local storage in your browser’s privacy and site-data settings. Clearing them may remove sign-in and local preferences, but does not automatically delete server data or cancel a plan. Use profile controls and subscription management for those actions.