Cookie Policy | Threadly

1. What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide reporting information. Threadly uses cookies and similar technologies (such as local storage and session storage) to operate the platform.

2. Cookies We Use

Essential

Strictly Necessary Cookies

Required for the platform to function. Cannot be disabled.

CookiePurposeDuration

next-auth.session-tokenAuthenticates your logged-in sessionSession / 30 days

next-auth.csrf-tokenPrevents cross-site request forgery attacksSession

next-auth.callback-urlStores redirect URL after sign-inSession

__Host-next-auth.csrf-tokenSecure CSRF protection (HTTPS)Session

Functional

Preference Cookies

Remember your settings and improve your experience.

Storage KeyPurposeDuration

themeStores your light/dark mode preferencePersistent (localStorage)

gdpr_consentRecords your GDPR consent choicePersistent (localStorage)

gdpr_consent_dateTimestamp of your consent decisionPersistent (localStorage)

i18nextStores your language preferencePersistent (localStorage)

Analytics

Analytics Cookies

We use privacy-friendly analytics to understand how the platform is used and improve it. Analytics data is anonymised and never sold. You can opt out of analytics via the GDPR consent dialog or by contacting us.

3. Third-Party Cookies

Some features embed third-party services that may set their own cookies:

Stripe: Payment processing. Sets cookies during checkout to prevent fraud and remember your payment method. Governed by Stripe's Cookie Policy.
Social platform OAuth popups: When connecting a social account, the platform (e.g. X, Meta, Google) may set its own cookies in that flow. These are governed by each platform's cookie policy.

We do not use Google Analytics, Facebook Pixel, or other advertising trackers on Threadly.

4. Managing Cookies

You can control cookies through several methods:

GDPR consent dialog: shown on first visit; you can choose "Essential Only" to reject non-essential cookies.
Browser settings: all modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent you from signing in.
Local storage: you can clear localStorage in your browser's developer tools (DevTools → Application → Local Storage).
Contact us: email privacy@threadlyhq.com to exercise any data rights related to cookies.

5. Do Not Track

We respect Do Not Track (DNT) signals. When DNT is enabled in your browser, we disable any non-essential analytics and tracking on your session.

6. Changes

We may update this Cookie Policy when we add or change cookies. The "Last updated" date at the top reflects the most recent revision. For significant changes, we will notify users via email or in-app notice.

7. Contact

Questions about cookies or your privacy?
Email: privacy@threadlyhq.com