Cookies
Cookie policy
Last updated: August 5, 2026
This page is short because the list is short. Thirdlight uses cookies to run your session and keep you signed in — not to track you.
In plain words
- One essential cookie connects your browser to your in-progress session. It expires after 24 hours.
- When accounts are on, our sign-in provider sets the cookies that keep you signed in.
- Our analytics set no cookies and store nothing on your device.
- There are no advertising or tracking cookies here, which is why there is no cookie banner.
The summary above is a guide. The full text below is the part that governs.
1. The cookies we set
| Cookie | Type | Lifetime | What it does |
|---|---|---|---|
mend_visitor | Essential | 24 hours | Set when you begin a session. A random identifier that connects your browser to your in-progress session and snapshot before an account exists. Readable only by our server, never by scripts. |
| Sign-in cookies (Clerk) | Essential | While you stay signed in | Set by Clerk, our sign-in provider, when you create an account or sign in. They are what keeps you signed in between visits. |
| Payment cookies (Stripe) | Essential — arrives with paid subscriptions | Set during checkout | When subscriptions open, Stripe sets cookies on its checkout surfaces for payment security and fraud prevention. |
That is the whole list. Every cookie on it exists to provide something you asked for, which is why none of them needs a consent banner.
2. Analytics, without cookies
We count product steps in aggregate — a session started, an invite accepted — and we configured that counting to store nothing on your device: no cookies, no local storage, no identifier that survives between visits. Each visit looks new to our analytics, and no event ever contains anything you said or typed. The privacy policy describes exactly what an event carries.
3. What is not here
- No advertising cookies, and nothing shared with ad networks.
- No third-party tracking pixels.
- No session-replay or screen-recording scripts.
- No cross-site identifiers.
4. Controlling cookies
Your browser can block or clear cookies for any site, including ours. If you block the essential ones, the product loses its short-term memory of you: a session in progress cannot find its snapshot, and sign-in will not hold. Everything else about the site still works.
5. Changes and contact
If this list ever grows, we update this page and the date at the top — and if a change would introduce a cookie that needs your consent, we ask for consent rather than assume it. Questions go to the contact in the company block below.
- Operating entity: [Entity name and legal form — founder to confirm]
- Registered address: [Business address — founder to confirm]
- Governing law and venue: [State or country — founder to confirm with counsel]
- Contact for privacy requests and legal notices: [Dedicated mailbox — founder to confirm. Until it exists, the email channel already in use for the product is the interim route.]