Cookie Policy
Last updated: 2026-10-20
Effective date: May 22, 2026
1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help us recognize your device, remember your preferences, and understand how you use Thrivid. We also use similar technologies such as local storage and session storage.
2. Essential Cookies
Essential cookies are necessary for Thrivid to function properly. These include authentication cookies that keep you logged in, session cookies that maintain your active session, and security cookies that help protect your account. You cannot opt out of essential cookies because the service would not work without them.
3. Analytics Cookies
Optional analytics providers are Google Analytics 4 (Google) and PostHog. After analytics consent, they receive permitted usage events and sanitized route information. PostHog can provide masked replay on allowed public routes; sensitive surfaces are blocked. Google Sign-In, Paddle, OpenRouter/model providers and Sentry serve separate authentication, billing, AI and diagnostics roles; availability depends on configured features. GA can set _ga and _ga_* cookies; Google defaults can last up to two years unless configured otherwise. PostHog is configured for localStorage persistence (ph_*); localStorage has no automatic browser expiry. thrivid_cookie_consent stores the browser consent choice separately. Authentication and payment storage are not analytics consent.
4. Third-Party Cookies
Optional analytics providers are Google Analytics 4 (Google) and PostHog. After analytics consent, they receive permitted usage events and sanitized route information. PostHog can provide masked replay on allowed public routes; sensitive surfaces are blocked. Google Sign-In, Paddle, OpenRouter/model providers and Sentry serve separate authentication, billing, AI and diagnostics roles; availability depends on configured features.
5. Cookie Table
- Google Sign-In — sets cookies to manage authentication sessions and verify your identity.
- Paddle — sets cookies to manage checkout sessions, prevent fraud, and maintain your subscription state.
- Google Analytics 4 · Google — GA can set _ga and _ga_* cookies; Google defaults can last up to two years unless configured otherwise. PostHog is configured for localStorage persistence (ph_*); localStorage has no automatic browser expiry. thrivid_cookie_consent stores the browser consent choice separately. Authentication and payment storage are not analytics consent.
- PostHog — Browser storage duration is not server retention. Actual GA/PostHog server retention and replay availability depend on the deployed project settings; no fixed server-retention period is asserted here. Clearing browser storage does not erase previously collected provider records.
These cookies are governed by the respective third party's cookie and privacy policies.
Below is a summary of the cookies we use:
| Category | Purpose | Duration | Provider |
|---|---|---|---|
| Essential | Authentication and session management | Session / up to 30 days | Thrivid |
| Analytics | Optional analytics providers are Google Analytics 4 (Google) and PostHog. After analytics consent, they receive permitted usage events and sanitized route information. PostHog can provide masked replay on allowed public routes; sensitive surfaces are blocked. Google Sign-In, Paddle, OpenRouter/model providers and Sentry serve separate authentication, billing, AI and diagnostics roles; availability depends on configured features. | Browser storage duration is not server retention. Actual GA/PostHog server retention and replay availability depend on the deployed project settings; no fixed server-retention period is asserted here. Clearing browser storage does not erase previously collected provider records. | Google Analytics 4 · Google / PostHog |
| Authentication | Google Sign-In session management | Session | |
| Payment | Checkout sessions, fraud prevention, subscription management | Session / up to 30 days | Paddle |
6. Retention Periods
GA can set _ga and _ga_* cookies; Google defaults can last up to two years unless configured otherwise. PostHog is configured for localStorage persistence (ph_*); localStorage has no automatic browser expiry. thrivid_cookie_consent stores the browser consent choice separately. Authentication and payment storage are not analytics consent. Browser storage duration is not server retention. Actual GA/PostHog server retention and replay availability depend on the deployed project settings; no fixed server-retention period is asserted here. Clearing browser storage does not erase previously collected provider records.
7. How to Manage Cookies
Optional analytics load only after acceptance. Use Cookie preferences in the footer to change your choice; declining stops future capture. You may also clear provider cookies/localStorage in your browser. This does not cancel billing, delete your account or request erasure of existing analytics records.
8. Changes to This Policy
We may update this Cookie Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. We encourage you to review this page periodically.
Contact
If you have questions, please contact us at [email protected].
This Cookie Policy is part of our Privacy Policy and Terms of Service. Please review all three documents for a complete understanding of how we handle your data.