Cookie Policy

Cookies are small text files stored on your device by your browser. They can be essential (strictly necessary for the website to function) or optional (used for analytics or performance tracking). Short-lived first-party browser records may also protect optional features such as the Google sign-in handoff, as described below.

A) Essential Cookies (Strictly Necessary)

These cookies are required for the core functionality of our website and shop. They do not store marketing profiles and are set automatically without requiring your consent, because the site cannot function securely without them.

• E-commerce & Cart (WooCommerce): Cookies such as woocommerce_cart_hash, woocommerce_items_in_cart, and wp_woocommerce_session_ keep your cart available as you browse and check out.
• Account Security (WordPress): Cookies such as wordpress_logged_in_ and wordpress_sec_ keep you securely logged into your account so you can access your font files and order history.
• Form & Session Security (WordPress / WooCommerce): Security tokens and related session data protect login, checkout, and account actions from forged or tampered requests. Cookie names vary by session.
• Payment Security & Fraud Prevention (Stripe): Stripe sets cookies across its network (e.g., __stripe_mid, machine_identifier, private_machine_identifier) to securely process payments and help prevent card fraud.
• Site Performance (LiteSpeed): When page caching is enabled, the _lscache_vary cookie helps serve pages quickly and consistently.
• Consent Management (CookieYes): The cookieyes-consent cookie stores your consent choices so we do not ask again on every visit (typically up to 1 year).

B) Google sign-in

You can use Google sign-in on the My Account and logged-out checkout pages. Type Forward does not load a Google sign-in script, iframe, or Google cookie when one of those pages opens. The process starts only after you deliberately choose “Continue with Google,” when your browser is redirected to accounts.google.com.

On Google’s own account-selection or sign-in pages, Google and your browser may use Google cookies and similar session technologies to recognize an active Google session, let you choose an account, and authenticate you. Google handles that information under its own Privacy Policy.

Type Forward uses short-lived, strictly necessary first-party security records to bind the sign-in request to your browser, prevent misuse, and return you to the correct page. These records expire automatically within 30 minutes. They do not enable Type Forward analytics or advertising and do not change your analytics-cookie choice.

We do not use Google One Tap or automatic sign-in, do not keep a Google refresh token, and do not request access to Google Drive, Calendar, contacts, or other Google services. Email-and-password sign-in and password recovery remain available.

C) Optional Cookies (Analytics & Performance)

These are only set if you give us permission via our cookie consent banner. They are grouped into categories below.

A note on Google Tag Manager: We use Google Tag Manager to load optional analytics tools according to your cookie choice. It does not itself set cookies, but the tools it loads may do so.

Traffic Source Tracking (WooCommerce Sourcebuster)
Where WooCommerce order attribution is enabled, it may set sbjs_* session cookies (including sbjs_current and sbjs_first) to store data about your traffic source, browser type, and visit count so we can see how you found the shop. When order attribution is disabled, those cookies are not set. Lifetime is typically session-based or short-lived unless configured otherwise in WooCommerce.

Analytics Cookies (Google Analytics, via GTM)
These cookies help us track visits, identify popular pages, and analyze user behavior to improve the site.

• _ga: Used to distinguish users for traffic analysis. (Expires after 2 years)
• _ga_*: Used to store and count page views. (Expires after 1 year)

Behavioral Analytics (Hotjar)
Used to identify user experience issues through heatmaps and session recordings.

• _hjSessionUser_*: Stores a unique user identifier to recognize you across different visits. (Expires after 1 year)
• _hjSession_*: Holds current session data during a visit. (Expires after 30 minutes)

Microsoft Clarity (Behavior Analytics)
We use Microsoft Clarity, after you give analytics consent, to see how you use our website through heatmaps and session recordings, which helps us improve its design and usability.

• CLID: Identifies your first visit to the site for analytics. (Expires after 1 year)
• _clck: Stores a unique Clarity User ID to recognize you on future visits. (Expires after 1 year)
• _clsk: Groups your page views into a single session recording for analysis. (Expires after 1 day)

You are in control of your data. When you first visit our site, a consent banner provided by CookieYes will appear, allowing you to Accept all, Reject all, or Customize your cookie choices. Optional analytics cookies are disabled by default until you consent.

You can change your mind and update your preferences at any time using the cookie settings control on the site (usually a small icon or link on the page edge — or the same controls in the banner when it reappears). You can also clear cookies in your browser settings. Our footer includes a link to this Cookie Policy for reference.

When you click an affiliate link (e.g., to Fontspring or MyFonts), that external site may set its own cookies under its policy. We do not control those cookies.

For complete details on your data protection rights (such as the right to access or erase your data), our policy regarding children’s data, and how we handle updates, please refer to our main Privacy Policy. It contains comprehensive information for all of these topics.

We may update this Cookie Policy when our services, cookies, or the law change. We will post the updated version on this page and change the “Last updated” date shown in the sidebar.