Cookie Policy

Last updated: 3 April 2026 · Policy version: 1.0

This Cookie Policy explains how DORSET CREATIVE LTD (“Threadsovereign”, “we”, “us”) uses cookies and similar technologies on the Threadsovereign platform (“Platform”). It should be read alongside our Privacy Policy.

This policy is written in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) as amended, and UK GDPR.

1. What Are Cookies?

Cookies are small text files placed on your device by a website. They allow websites to recognise your device, remember your preferences and understand how you use the site.

We also use local storage (a similar browser technology) to store your cookie consent preferences. This policy covers both cookies and local storage where relevant.

2. How We Use Cookies

We use three categories of cookies. Your consent is required for all categories except Strictly Necessary cookies.

Strictly NecessaryAlways active — no consent required

These cookies are essential for the Platform to function. They enable you to log in, navigate between pages securely, and maintain your session. You cannot opt out of these cookies while using the Platform.

AnalyticsRequires your consent

Analytics cookies help us understand how the Platform is used — which features are most accessed, where users encounter problems, and how performance can be improved. We currently use Vercel Analytics. No personally identifiable information is shared with Vercel Analytics.

MarketingRequires your consent — not currently in use

We do not currently use marketing or advertising cookies. This category is listed for completeness. If we introduce any marketing cookies in the future, we will update this policy and request fresh consent.

3. Complete Cookie List

The following is a complete list of every cookie and local storage key set by the Threadsovereign Platform. We are committed to transparency — if a cookie is not listed here, it should not exist.

Strictly Necessary

Name	Purpose	Duration	Provider	Category
`sb-[project-ref]-auth-token`	Supabase authentication session token. Maintains your login session across page navigations.	Session (deleted when you close your browser or sign out)	Threadsovereign / Supabase	Strictly Necessary
`sb-[project-ref]-auth-token-code-verifier`	PKCE code verifier used during OAuth authentication flow. Prevents CSRF attacks during login.	Session only	Threadsovereign / Supabase	Strictly Necessary
`ts_cookie_consent`	Stores your cookie consent preferences (necessary/analytics/marketing — true/false) and the policy version at time of consent. Stored in localStorage, not a cookie.	3 years or until you withdraw consent	Threadsovereign	Strictly Necessary

Analytics (requires consent)

Name	Purpose	Duration	Provider	Category
`_vercel_insights_*`	Vercel Analytics — measures page views and Web Vitals performance metrics (loading speed, interactivity). No personal data is transmitted; data is anonymised before leaving your device.	Session	Vercel Inc. (US)	Analytics

Marketing (not currently used)

No marketing cookies are currently set by the Platform.

Important: Analytics cookies are not loaded until you have explicitly granted analytics consent via the cookie banner. If you reject analytics cookies, Vercel Analytics does not load and no analytics data is collected about your session.

4. Managing Your Preferences

When you first visit the Platform, a cookie consent banner will appear. You can:

Accept all — enables both analytics categories
Reject non-essential — only strictly necessary cookies are used
Manage preferences — choose which categories to enable individually

Your preferences are recorded in your browser's local storage (key: ts_cookie_consent). They are respected on every subsequent visit.

You can also manage cookies through your browser settings. Note that blocking all cookies will prevent you from logging in to the Platform.

5. Withdrawing Consent

You can withdraw your consent at any time. To do so:

Click the “Cookie Settings” link in the footer of any page
Alternatively, clear your browser's local storage for this site in your browser settings
The cookie consent banner will reappear on your next visit, allowing you to set new preferences

Withdrawing analytics consent means that Vercel Analytics will stop loading on subsequent page visits. It cannot retroactively remove data already submitted to Vercel Analytics during your previous consented sessions (Vercel Analytics data is anonymised and not linked to your identity).

6. Third-Party Services

The following third-party services may set cookies or use similar technologies in connection with the Platform:

Service	Provider	Purpose	Privacy Policy
Vercel Analytics	Vercel Inc. (US)	Anonymous page view analytics and performance monitoring	vercel.com/legal/privacy-policy
Supabase Auth	Supabase Inc. (US, EU-hosted)	Authentication session management	supabase.com/privacy

We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar or any other third-party analytics or retargeting service at this time.

7. Changes to This Policy

If we change which cookies we use, we will update this policy and increment the policy version number. If the change involves cookies that require your consent, the consent banner will reappear to allow you to review and accept the updated cookie categories.

8. Contact Us

Cookie and privacy queries

Email: privacy@threadsovereign.io

We aim to respond within 5 working days.

You may also complain to the ICO at ico.org.uk · Helpline: 0303 123 1113 if you believe your privacy rights have been breached.