Forever Components
Privacy
Last updated 8 November 2026
Forever (forevercomponents.com) is run by Forever Components in the UK. Questions or requests about your data: support@forevercomponents.com.
Short version: we collect what we need to run your account and your membership, and to see which parts of the site work. We use a small number of our own cookies and browser storage, listed below. We do not sell data, run ad trackers or use retargeting pixels. We only send update emails if you ask for them, or if you are a member who did not opt out.
What we collect
| When | What | Why |
|---|---|---|
| You create an account | Email address and password (stored hashed by our authentication provider). Your daily free-copy count, votes, membership status and your update-email choice, with the date you made it. | To run your account and the daily copy limit. |
| You become a member | Stripe handles the payment. We receive your email, plan and payment status. We never see your card details. | To give you membership and keep billing records. |
| You join the Pro waitlist | Email address, collected by Formspree. | To send one email when Pro launches. Nothing else. |
| You join the creator waitlist | Email address, signup source, consent wording/version and date, and any unsubscribe date, stored in Supabase. | To send Creator Program updates and invitations, new creative web assets and Forever news, only after you tick the consent box. No account or payment needed. |
| You use the site | A random ID kept in your browser, and which steps you reach (page view, sign-up, checkout). Linked to your account once you sign in. We do not store your IP address or browser details with these events. | To see where people get stuck and improve the site. |
| You arrive from a campaign link | The campaign tags in the link (source, medium, campaign, content and term), stored with the random browser ID. Linked to your account if you sign up. | To see which campaigns bring people who sign up. Kept 90 days. |
| You see a page we are testing | Which version of the page you were shown, and how you used it: pages viewed, time the page was visible and time you were active, how far you scrolled, which sections you reached, which components you tried, switched or copied, which filters you chose, whether you used search (never what you typed), sign-up and sign-in steps, and the next page on this site (or only the domain of a link to another site). Linked to your account once you sign in. We do not store your IP address, browser details, search text or anything you type. | To compare versions of the page fairly and keep the one that works better. |
| You view the canvas | Page-speed measurements on a sample of visits, through Vercel Speed Insights. No cookies. | To keep the site fast. |
Favourites you save on the canvas stay in your browser and are never sent to us.
Cookies and browser storage
We set no advertising or third-party cookies. Our own cookies and browser storage are:
| Name | Type | What it does | How long |
|---|---|---|---|
fc_start_brand_v1 | Cookie | Set only when you open a campaign link to our start page. Holds a random test ID and which of two page designs you see, so you see the same one each visit. Signed, and not readable by page scripts. | 30 days |
fc_start_brand_hint | Cookie | Tells the page that a test design is already chosen. Holds no ID. | 30 days |
fc-funnel-anon-v1 | Browser storage | The random browser ID used for the usage steps above. | Until you clear site data |
fc-first-touch-v1, fc-touch-posted-v1 | Browser storage | The campaign tags of the link you first arrived from. | Until you clear site data; ignored after 90 days |
fc_ab03_route, fc_ab03_arm | Browser storage | Which first page and which button design you see when a homepage test is running. | Until you clear site data |
fc-start-brand-visit-v1 | Browser storage | Groups the page test events of one visit (ends after 30 minutes without use). | Until you clear site data |
forever-account-session-v1 | Browser storage | Keeps you signed in. | Until you sign out |
To stop the tests and usage steps, clear cookies and site data for this site in your browser settings, or email us and we will delete the records linked to your browser or account. The site works the same without them.
Google and GitHub sign-in
Where available, you can choose Google or GitHub instead of an email password. Supabase receives the provider identity, email and basic profile details to create or connect your account. We do not request access to your repositories, files or contacts. Connecting a method keeps your existing account ID and membership. Provider sign-in does not subscribe you to update emails; that remains a separate choice on your account page.
The sign-in session stays in this browser. Temporary callback data is cleared after the attempt. Google or GitHub handles its own authorization page under its own privacy terms. We do not use provider access tokens to call their services.
Emails
- Creator waitlist emails cover Creator Program updates and invitations, new creative web assets and Forever news. Consent starts unticked. Use the unsubscribe link supplied in these emails, or email support@forevercomponents.com to withdraw. This choice is separate from your account email preference.
- Account emails (sign-up confirmation, payment receipts) are part of running your account.
- Update emails (new components, features, offers) go to people who ticked "Send me new components" at sign-up, and to members who did not tick "Don't email me" when they joined. Members are told this at checkout. Untick it on your account page, or use the unsubscribe link in any update email.
- We may write to you personally about your own use of Forever, for example to ask for feedback. Reply "no more" and we will stop.
Who processes your data
- Supabase: accounts, sign-in and the database. It records sign-in IP addresses for security.
- Google / GitHub: your chosen optional sign-in provider, when enabled.
- Stripe: payments and subscriptions.
- Vercel: hosting. Its servers handle your requests and keep standard request logs.
- Formspree: the Pro waitlist form.
- Google Fonts: some pages load fonts from Google, which receives your IP address when they load.
Legal basis
- Running your account and membership: to perform our agreement with you.
- Usage and speed measurement, campaign tags and page tests: our legitimate interest in a working, fast site that people find useful.
- Update emails to free accounts: your consent, which you can withdraw at any time.
- Update emails to members: the "soft opt-in" for customers (PECR regulation 22), about products like the one you bought, with a way to opt out at checkout and in every email.
How long we keep it
Account data stays while your account exists. Ask us to delete your account and we will remove it, except payment records that the law requires us to keep.
Usage steps are kept up to 400 days. Campaign tags are kept 90 days. Page test records are kept while the test runs and are deleted no later than 12 months after it ends.
Creator waitlist data stays while we develop and invite people to the program, until you ask us to delete it or we close the list. An unsubscribe record prevents further waitlist emails. We also keep a daily-changing digest of your IP address for short-lived signup rate limits; we do not store the raw IP in the waitlist. These counters expire after two hours and are cleaned up on later requests. No signup email is sent automatically.
Your rights
You can ask to see, correct, export or delete your data, object to how we use it, or withdraw consent. Email support@forevercomponents.com. If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this page changes in a way that matters, we will update the date at the top. If you opted in to update emails, we will also tell you by email.