Skip to content
SecureThread
Legal

Cookie Policy

Last updated 25 October 20264 min read8 sections

This policy explains what ArcByte Studios stores in your browser when you visit securethread.co (this website) and when you use the SecureThread app at app.securethread.co. In short: only what each needs to work, and on this website, your theme choice if you allow it. Neither uses analytics, advertising or tracking cookies.

1. Cookies and browser storage

A cookie is a small file a website asks your browser to keep and send back with later requests. Local storage and session storage are similar, but stay in your browser and are not sent with requests. This policy uses “storage” for all three. Strictly necessary storage is what a service cannot work without; everything else needs your consent first.

2. What this website stores

securethread.co, docs.securethread.co and developers.securethread.co keep these items in your browser. The only cookie is the record of your cookie choice:

st-site-consent

Type

Local storage

Category

Strictly necessary

Purpose

Remembers your choice in the cookie banner, so you are not asked on every page.

How long

Until you change your choice or clear your browser’s site data

st_site_consent

Type

Cookie, on securethread.co and its subdomains

Category

Strictly necessary

Purpose

The same choice, shared with docs.securethread.co and developers.securethread.co so they do not ask again. It holds only your choice and its date.

How long

12 months, or until you change your choice

st-site-theme

Type

Local storage, or session storage

Category

Preferences

Purpose

Remembers whether you chose the light or dark theme. Kept across visits only if you allow preference storage; otherwise it lasts until you close the tab.

How long

Until you change it or clear your browser’s site data

The site loads its fonts and images from its own address. It runs no analytics, no advertising and no social media scripts, so no third party learns about your visit from it.

3. The contact form and Cloudflare Turnstile

When spam protection is switched on, the contact form uses Cloudflare Turnstile to tell people from automated programs. Turnstile runs only on the contact page, is loaded from challenges.cloudflare.com, and processes information from your browser under Cloudflare’s own privacy policy. It is part of the form working, so it is strictly necessary there. The form works the same whether or not you accepted optional storage.

4. What the SecureThread app stores

When you sign in at app.securethread.co, the app sets these cookies. All are strictly necessary for signing in and keeping your account safe, except st_sidebar, which only remembers how you left the layout.

st_session

Purpose

Keeps you signed in. HttpOnly, so scripts cannot read it; Secure and SameSite=Lax.

How long

Up to 14 days; ends after 12 hours without activity

st_csrf

Purpose

Protects the changes you make from requests started by other sites.

How long

Until you close the browser; it stops working when your sign-in session ends

st_sso

Purpose

Holds the state of a Google or Microsoft sign-in while it completes. HttpOnly.

How long

10 minutes

st_sidebar

Purpose

Remembers whether the desktop sidebar is collapsed.

How long

One year

st_mcp_authz_…

Purpose

Ties an AI assistant’s connection request to the browser that started it. HttpOnly.

How long

10 minutes

The app also keeps a few interface settings in your browser’s local storage, such as the theme, recent searches in the command palette and prompts you have dismissed. They stay on your device. The full list is in section 6 of the Privacy Policy.

5. Email sent through SecureThread

Email that customers send through SecureThread can carry open and click estimates only if the sending organization switches tracking on; it is off by default. Those estimates are the sending organization’s, under its own policies, and SecureThread labels them as estimates everywhere they appear. One-click unsubscribe links in campaign mail work without any cookie.

6. Your choices

The banner on your first visit lets you accept or reject optional storage in one click, or choose by category. You can change your mind at any time:

  • (also at the bottom of every page);
  • your browser’s settings, which can block or delete cookies and site data. Blocking the app’s strictly necessary cookies stops you from signing in.

Withdrawing consent removes the theme choice this website had stored.

7. Changes to this policy

If what the website or the app stores changes, this page changes with it, and the date at the top says when. A change that needs your consent brings the banner back.

8. Contact

ArcByte Studios, GoSpace, Shelter 2, The Defence Enclave, K Narayana Pura Road, Kothanur, Bengaluru, Karnataka 560077, India. Questions about this policy or your data: [email protected].