Skip to content
ModFiveM

Legal

Cookie policy

What ModFiveM keeps on your device, why, for how long, and how you change your choice.

Last updated October 30, 2026

The cookie policy is written by ModFiveM and describes how the site works today. It has not been reviewed by a lawyer yet; when that is done, this line goes.

What cookies and browser storage are

A cookie is a small text file a website stores in your browser and reads back when you return. Browsers also have other storage a site can use, such as local storage, session storage and IndexedDB. This policy calls them all cookies and storage, and lists each one ModFiveM uses.

Under the Swedish Electronic Communications Act (lagen om elektronisk kommunikation, chapter 9, section 28) and the EU’s ePrivacy rules, a site may only store or read something on your device if you agree to it, unless it is needed to give you a service you asked for, such as staying signed in. Where cookies concern personal data, the GDPR applies too, as the privacy policy describes.

In short

ModFiveM uses the cookies and storage the site needs: to sign you in and keep you signed in, to remember your language and your cookie choice, to keep your projects and choices in the editors on this device, and to count an invitation you followed. These need no consent and are always on.

One kind is optional: content from other services. Profile pictures from Discord and Google are only loaded if you allow it; otherwise the first letter of the name is shown. Discord’s picture server can set its own cookies, and loading a picture sends your IP address to Discord or Google.

There are no cookies for statistics, advertising or tracking, and no scripts from Google Analytics, Facebook, TikTok or other ad networks.

Cookies

These are the cookies the site sets itself, and the ones Discord’s picture server may set when you have allowed content from other services.

On modfivem.com the sign-in cookies’ names begin with __Secure- (for example __Secure-pedforge.session_token), which tells the browser to send them over an encrypted connection only. The names say pedforge because that was ModFiveM’s former name.

Cookies
NameSet byPurposeKindLifetime
modfivem_consentModFiveMRemembers your cookie choice, so the banner does not ask again on every page.Necessary12 months
NEXT_LOCALEModFiveMRemembers the language you chose on the site.NecessaryUntil you close the browser
pedforge.session_tokenModFiveMKeeps you signed in. On modfivem.com its name begins with __Secure-.Necessary7 days, renewed while you use the site
pedforge.session_dataModFiveMA short copy of the sign-in, so every page does not have to look it up again.Necessary1 minute
pedforge.stateModFiveMProtects the sign-in while you sign in with Google or Discord.Necessary5 minutes
pedforge.two_factorModFiveMHolds the sign-in between your password and the two-factor code.Necessary10 minutes
pedforge.trust_deviceModFiveMLets a device you chose to trust skip the two-factor code. Only set if you tick the box.Necessary30 days
pedforge_refModFiveMKeeps the invite code from an invite link you opened, so the invitation counts when you create an account.Necessary30 days, or until the account is made
__cf_bmDiscordDiscord’s (Cloudflare’s) bot protection on the server that serves Discord’s profile pictures. Only when you have allowed content from other services.Content from other services30 minutes
__dcfduid__sdcfduidDiscordDiscord’s own identifier for the browser, which Discord may set when its pictures load and which many browsers block from other sites. Only when you have allowed content from other services.Content from other servicesUp to 5 years

Storage in the browser

The site and the editors also keep things in your browser’s storage. All of it is ModFiveM’s own, stays on this device and is part of something you use, so it needs no consent. None of it is sent to other services.

If you clear the site’s data in the browser, this is removed too, including projects that are only on this device. Export or save what you want to keep first.

Storage in the browser
NameSet byPurposeKindLifetime
pedforge.*modforge.*modfivem.*localStorageModFiveMYour choices on the site and in the editors: panel widths, export settings, brush presets, recent colours, the catalog’s layout, closed announcements and giveaway cards, and the pairing with ModFiveM for the computer.NecessaryUntil you clear the site’s data
modfivem.supportChat.*localStorageModFiveMThe support chat’s last messages, on this device only.NecessaryUntil you clear the chat or the site’s data
pedforge.pendingReleaseslocalStorageModFiveMCredits to give back when an export did not finish, until the site reaches the server.NecessaryUntil it is handled
pedforge.pendingEmailpedforge.stage.hint-seenmodforge.capturesessionStorageModFiveMThe address you just signed up with, a hint shown once, and a picture being taken in the editor.NecessaryUntil you close the tab
pedforgeIndexedDBModFiveMYour projects in the ped, vehicle and weapon editors: the files, the edit history, pictures, texture drafts, the catalog from your game folder and the folders you let the editor open.NecessaryUntil you delete the project or clear the site’s data
modfivem-sound-editorIndexedDBModFiveMYour projects in the sound editor.NecessaryUntil you delete the project or clear the site’s data

Other services

Profile pictures from Discord and Google are loaded from Discord’s and Google’s own servers, and only if you have allowed content from other services. Discord and Google then receive your IP address and handle it under their own privacy policies. Pictures you upload yourself are kept by ModFiveM and are always shown.

Payments happen on Stripe’s own checkout page, outside modfivem.com. Stripe sets its own cookies there, for security and to prevent fraud, under Stripe’s privacy policy. No Stripe script runs on ModFiveM’s pages.

When you sign in with Google or Discord you visit their pages, which have their own cookies. ModFiveM only gets back what the sign-in needs.

The site’s typefaces, pictures and films are served by ModFiveM itself and its host Vercel, so no request goes to Google Fonts or a video service when you open a page.

Change or withdraw your choice

The first time you visit, a banner asks about cookies. Accept all allows content from other services, Only necessary keeps it off, and Customise lets you choose kind by kind. Nothing optional is on before you choose, and the site works the same whichever you pick.

You can change your choice at any time under Cookie settings at the bottom of every page, or with the button below. Your choice is kept in the cookie modfivem_consent for 12 months; after that, or when this policy changes, the site asks again.

If you turn content from other services off, no more pictures are loaded from Discord or Google. Cookies Discord has already set belong to Discord’s domain, and the site cannot remove them for you; you remove them in your browser’s settings, under cookies and site data for discordapp.com.

You can also block or delete cookies in your browser’s settings. If you delete ModFiveM’s cookies you are signed out, and the site forgets your language and your cookie choice.

Questions and changes

Questions about cookies go to alex@modfivem.com. How ModFiveM handles personal data, and your rights, are described in the privacy policy.

If ModFiveM starts using a new cookie or a new kind of cookie, it is added here first and the date at the top changes, and if it needs your consent, the site asks before it is used.