Cookie Policy
What we store on your device, and why
Cookies are small files a website saves in your browser. Our Fable also uses your browser's local storage, session storage and IndexedDB, which work the same way for this purpose, so this policy lists all of them. It explains each item we use, why, for how long, and how to switch off the ones that are optional. Our Privacy Policy covers everything else about your information, and our subprocessor list names the companies involved.
We do not use cookies to build advertising profiles from your archive, your children's details, or anything your family writes or uploads. The advertising and analytics tools below run only on eligible public pages, never inside the signed-in family archive.
Your choices
Optional analytics and ad measurement follow one rule. In the European Union, the EEA, the United Kingdom and Switzerland, and whenever we cannot tell which country you are in, they stay off until you accept them in the cookie banner. Everywhere else they run unless you decline. You can change your answer here at any time:
Loading your current choice…
Global Privacy Control. If your browser or an extension sends the Global Privacy Control signal, we treat it as declining optional analytics and ad measurement, in every country, without you having to do anything here. This is also how we honour it as a request to opt out of the sale or sharing of personal information under California law.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in and checkout from working.
1. Strictly necessary
Sign-in, security, checkout, your cookie choice, and keeping your archive's encryption working. Our Fable cannot work without them, so they do not need consent and cannot be switched off here.
How to opt out: You can delete them in your browser settings at any time; you will be signed out and some features will stop working until you sign in again.
ourfable_session
Cookie · set by Our Fable · 90 days, renewed while you keep using your archive; deleted when you sign out
Keeps a parent signed in. Signed, HttpOnly (page scripts cannot read it), sent only over HTTPS.
ourfable_guardian_session
Cookie · set by Our Fable · 24 hours · Archive Guardian pages
Keeps an Archive Guardian signed in while they accept or use their role. HttpOnly, HTTPS only.
ourfable_remembered_device
Cookie · set by Our Fable · 30 days
Set only if you choose "don't ask again on this device" after the sign-in second step (passkey or text code). Signed and tied to your account; changing your sign-in protection cancels it.
of_checkout_claim
Cookie · set by Our Fable · 24 hours, deleted once the account is opened · Sign-up checkout
Ties a new archive's checkout to the browser that started it, so only that browser can open the new account afterwards. HttpOnly, HTTPS only.
ourfable_signup_handoff
Cookie · set by Our Fable · 2 hours, deleted once a gifted account is opened · Sign-up
Carries a gift or invite code, and the email or child name you typed on a start page, to the sign-up form, so they never appear in the sign-up page's address. Read only by our server on the sign-up page. HttpOnly, HTTPS only.
__Host-ourfable_internal_admin_session
Cookie · set by Our Fable · 8 hours · Staff console only
Signs in Our Fable staff to the internal operator console. Never set for families or visitors.
cookie-consent
Local storage · set by Our Fable · Until you clear site data
Remembers your answer to the cookie banner or the choice on this page (accepted or declined) so we do not ask again and so the choice is applied on every page.
ourfable_enc_key_<family> and ourfable_key_salt_<family>
Local storage · set by Our Fable · Until you sign out or clear site data · Signed-in family pages
A copy of your family's archive key in its password-protected (wrapped) form, plus the salt needed to unwrap it, saved to skip a server round trip. The usable key itself is never written here. Kept in this tab's session storage too.
ourfable-vault-keys
IndexedDB · set by Our Fable · Until you sign out or clear site data · Signed-in family pages
Holds your unlocked archive key on this device as a browser key object that scripts can use but cannot export, so you do not have to re-enter your password every visit.
ourfable-guardian-keys
IndexedDB · set by Our Fable · Until the guardian clears site data · Archive Guardian pages
Holds an Archive Guardian's succession key on the guardian's own device, as a non-exportable browser key object.
ourfable_circle_key_backfill_<family>
Local storage · set by Our Fable · Until you clear site data · Signed-in family pages
The time of the last background check that circle invitations carry the encryption keys they need, so it runs at most every 12 hours.
ourfable:chunk-reload-at
Session storage · set by Our Fable · Until you close the tab
After a site update, lets a page reload itself once to fetch the new version without looping.
Stripe fraud-prevention cookies
Cookie · set by Stripe · Set by Stripe (see Stripe's cookie policy) · Checkout, gift checkout and billing pages
Stripe's payment form (Stripe.js) runs on our checkout and billing pages and may set its own cookies to detect fraud. We do not read them.
2. Preferences
Small settings and drafts that remember choices you made on this device. They are only written because you did something (picked a child, typed a draft, closed a panel) and never leave your browser.
How to opt out: Clear site data for ourfable.org in your browser settings. Drafts kept only in this tab disappear when you close it.
of_child_<family>
Cookie · set by Our Fable · 1 year, or until you sign out · Signed-in family pages
Which child (or "all children") the family pages show. Deleted when you sign out, because it names the family on a shared device.
ourfable-parent-path-<family>
Cookie · set by Our Fable · 1 year · Archive setup
Remembers that you chose "No co-parent for this archive" during setup (now also saved on your account).
ourfable-onboarding-single-parent-<family>, ourfable-recovery-complete-<family>, ourfable-passkey-complete-<family>
Local storage · set by Our Fable · Until you clear site data · Signed-in family pages
Remember that you finished a setup step (the co-parent choice, a recovery method, a passkey) so the reminder for it stops appearing on this device.
of-rail-roster-open
Local storage · set by Our Fable · Until you clear site data · Signed-in family pages
Whether the people list in the side menu is open or closed.
ourfable-music-platform
Local storage · set by Our Fable · Until you clear site data
Your preferred music service when you add a song to a letter.
ourfable-signup-draft-v1
Local storage · set by Our Fable · 7 days, or until checkout finishes or you choose "Start over" · Sign-up
What you typed into the sign-up form before checkout (children's names and dates, parent names, email; never your password), so leaving checkout does not mean starting over.
Drafts in progress (ourfable:letter-draft:…, ourfable_gate_draft_v2_…, ourfable_draft_…, ourfable_pending_first_letter)
Session storage · set by Our Fable · Until it is saved or you close the tab
A letter, contribution or first letter you are still writing, so a reload or a sign-in prompt does not lose it. Kept only in this tab and removed once it is saved to your archive.
ourfable-setup-wizard-dismissed-<family>, ourfable_today_draft_child_<family>, ourfable_today_composer_folded_<family>, ourfable_first_contribution_viewed_<family>, ourfable:home-scroll
Session storage · set by Our Fable · Until you close the tab
Small per-tab reminders: a setup dialog you closed, a one-time prompt already shown, a writing box you folded away, the first circle contribution you already opened, and where you were on the homepage when you come back to it.
3. Analytics
Google Analytics 4 measures traffic on eligible public pages, and a first-party attribution cookie remembers which campaign brought you here. In the EU, EEA, UK and Switzerland (and wherever we cannot tell your country) they run only if you choose "Accept analytics"; everywhere else they run unless you decline.
How to opt out: Choose "Decline" under Your choices on this page (or in the cookie banner, where it appears), or turn on Global Privacy Control in your browser, which we treat as a decline everywhere. You can also use Google's opt-out browser add-on.
Google Analytics cookies (_ga, _ga_<measurement ID>)
Cookie · set by Google · Set by Google (see Google's documentation) · Eligible public pages; never the signed-in family archive
Count visits to eligible public pages: marketing pages, sign-in, sign-up, gift, journal and legal pages, and the pages people open from invitation, question and delivery links. Page addresses are reported with the link's private token replaced and every query detail except campaign tags removed. Google's advertising storage stays switched off: we only ever grant analytics storage.
ourfable_attr
Cookie · set by Our Fable · 30 days
The campaign tags and ad-click IDs from the link that brought you here (utm_* tags, fbclid, gclid), so a later sign-up can be credited to the right campaign. Written only when analytics are allowed; declining deletes it.
ourfable_utm
Session storage · set by Our Fable · Until you close the tab
The same campaign tags, kept for this tab so they survive the trip from a landing page to checkout. Passed to an advertising or analytics partner only if you have not declined.
ourfable_pending_signup_checkout_analytics
Session storage · set by Our Fable · Until the welcome page loads or you close the tab · Sign-up
The plan and number of children you chose at checkout, held until the welcome page reports the completed sign-up to the measurement tools you allowed.
ourfable:fired:<event>:<family>
Local storage · set by Our Fable · Until you clear site data · Signed-in family pages
Marks a one-time milestone in your own archive (such as the first memory added) as already counted, so our own product statistics count it once. Goes to Our Fable only, never to a third party.
4. Advertising measurement
The Meta Pixel measures whether our ads lead to visits and sign-ups, on eligible public pages only. Same rule as analytics: opt-in in the EU, EEA, UK and Switzerland, opt-out elsewhere. It never runs inside the family archive.
How to opt out: Choose "Decline" under Your choices on this page, or turn on Global Privacy Control. To also stop the conversion reports our server sends about your email address, make an opt-out request at /legal/data-request.
Meta Pixel cookies (_fbp, _fbc)
Cookie · set by Meta · Set by Meta (see Meta's cookie policy) · Eligible public pages; never the signed-in family archive
Set by the Meta Pixel on eligible public pages (homepage, landing pages, pricing, gift, sign-up and the welcome page after checkout) to measure whether our ads lead to visits and sign-ups. When you start a trial or buy, our checkout reads them so the conversion report our server sends Meta matches the ad visit.
5. Third-party cookies
Google, Meta and Stripe decide the exact names and lifetimes of the cookies their own scripts set. See how Google uses cookies (and Google's Analytics opt-out add-on), Meta's cookie policy, and Stripe's cookie settings.
6. Changes and questions
When we add or change a cookie or storage item, we update this page first. Questions? Email hello@ourfable.org, or use our privacy request form.