Cookie Policy

Threadline uses a minimal number of cookies. We do not use third-party tracking cookies.

Cookies We Use

Cookie	Type	Duration	Purpose
`session`	Essential	7 days	Authenticates logged-in users. HTTP-only, Secure, SameSite=Lax.
`pending_plan`	Essential	24 hours	Remembers the pricing plan selected on the way to signup.
`pending_ref`	Essential	14 days	Stores a referral code from a shared signup link.

Cookies We Do NOT Use

No third-party cookies (no Google Analytics, no ad trackers on the widget)
No advertising cookies
No retargeting cookies
No analytics cookies on the embed script

On the Publisher's Site

The Threadline embed script runs on your publisher's site. We only set cookies on the publisher's domain if the visitor interacts with the widget (logs in or posts a comment). If a visitor only reads comments, no cookies are set.

Publishers are responsible for their own site's cookie consent banner. Threadline's essential cookies are exempt from consent requirements under most GDPR interpretations, but we recommend publishers disclose them in their cookie policy.

Cookie consent options

Threadline does not ship a built-in consent banner. Publishers choose how to disclose and gate cookies on their own site:

No banner needed (necessary cookies only after interaction). If visitors only read comments, Threadline sets no cookies. session is set only after the visitor logs in or otherwise authenticates through the widget. Many jurisdictions treat strictly necessary auth cookies as exempt - still disclose them in your cookie policy.
OneTrust / Cookiebot. Categorize Threadline cookies as Necessary or Functional (not Advertising / Targeting). Map session, pending_plan, and pending_ref to that category so they are not blocked as marketing scripts.
Delay embed load until consent. If your CMP requires prior consent before any third-party script runs, load the Threadline embed only after the user grants Functional/Necessary consent for comments.
Example: gate the script until consent is granted

<!-- Call after your CMP reports Functional/Necessary consent -->
function loadThreadline() {
  if (document.getElementById('threadline-embed')) return;
  var s = document.createElement('script');
  s.id = 'threadline-embed';
  s.src = 'https://threadline.io/api/embed';
  s.async = true;
  s.setAttribute('data-site-id', 'YOUR_SITE_ID');
  s.setAttribute('data-api-url', 'https://api.threadline.io');
  document.body.appendChild(s);
}

// Example hooks (names vary by CMP):
// window.addEventListener('CookiebotOnAccept', loadThreadline);
// OneTrust.OnConsentChanged(function () {
//   if (OnetrustActiveGroups.indexOf('C0003') > -1) loadThreadline();
// });

On threadline.io

Our marketing site and dashboard may use additional cookies for functionality (e.g., remembering login state). These are covered in our main privacy policy.