LEGAL
Cookie policy
The cookies and browser storage The Black Thread uses, what each one does, how long it lasts and how to change your choice.
Last updated
Cookies are small files a website keeps in your browser. Local storage is a similar store on your device. This page lists every one this site uses and how to change your choice. "We" means Bogdan Pop, who runs The Black Thread. The privacy policy covers everything else about your data.
What we use
Necessary. These keep you signed in, remember your cookie choice and note which cookie rules apply where you are. The builder also keeps your layout in local storage. The site doesn't work properly without them, so they're always on.
Analytics. Google Analytics counts visits and which builder features get used, so we know what to fix and build next. These cookies are optional.
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
sb-…-auth-token (may be split into .0, .1)Cookie | Supabase | Necessary | Keeps you signed in. Only set once you sign in. | Until you sign out, up to 400 days |
sb-…-auth-token-code-verifierCookie | Supabase | Necessary | Secures the sign-in step with Google, Discord or a new email account. | Removed once you're signed in |
tbt_consentCookie | The Black Thread | Necessary | Remembers your cookie choice. | 6 months |
tbt_regionCookie | The Black Thread | Necessary | Which cookie rules apply where you are. Holds only that, not your country. | Until you close the browser |
battle-jacket-canvas-stateLocal storage | The Black Thread | Necessary | Restores your builder layout when you come back. Stays in your browser. | Until you clear it |
tbt_legal_noticeLocal storage | The Black Thread | Necessary | Remembers that you've closed the note about our terms and privacy policy, so it isn't shown again. | Until you clear it |
_ga, _ga_KLMCMF4NSHCookie | Google Analytics | Analytics | Counts visits and builder use. | 13 months |
| Vercel Web Analytics | Vercel | None | Counts page views in total. Stores nothing in your browser. | Nothing stored |
| Profile picture | Google or Discord | None | If you sign in with Google or Discord, your browser loads your profile picture from their servers. | Nothing stored by us |
How your choice works
Outside the US, optional cookies stay off until you accept them. The banner gives you three equal choices: Accept all, Reject all, or Choose, to decide category by category. Until you choose, nothing optional runs.
In the US, Google Analytics runs by default, and a notice tells you so. You can turn it off in Cookie settings. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale and sharing, and marketing cookies stay off.
To know which rules apply, we use the country our host detects from your connection. The tbt_region cookie keeps only the answer, "optin" or "optout", and never your country.
We remember your choice for 6 months, then ask again. We also ask again if we add a new kind of cookie.
Changing your mind
Use Cookie settings, on this page or in the footer of every page. If you turn analytics off, we delete its cookies and reload the page, so Google Analytics stops straight away.
You can also block or delete cookies in your browser's settings. If you block the necessary ones, you won't be able to stay signed in. Clearing your browser's data for this site also removes the builder's autosaved layout.
Our record of your choice
Each time you make or change a choice, we keep a record of it: the version of our cookie setup, whether you allowed analytics and marketing, whether opt-in or opt-out rules applied, the time, and a random ID that's also in your tbt_consent cookie. The record holds no IP address and no browser details. We keep it for 2 years, so we can show that we asked.
Google Analytics
Google signals and ad personalisation are switched off, so Google Analytics isn't used for ads. Its _ga cookies last 13 months. Google says Google Analytics doesn't store IP addresses. We keep Google Analytics data for up to 14 months.
Vercel Web Analytics
Vercel Web Analytics runs without asking, because it sets no cookies and stores nothing in your browser. It counts page views, and we only see totals.
Profile pictures
If you sign in with Google or Discord, your browser loads your profile picture straight from their servers, so they see that request. We don't set a cookie for it.
Advertising
There are no advertising pixels on this site today. If we add them, visitors outside the US will be asked first, and US visitors will be able to opt out. We'll update this page before that happens.
Questions
Email mail@bogdan-pop.com.