01Our approach
Nothing non-essential runs on the marketing site until you actively accept. No ad pixels, no data sale, no cross-site behavioral ads.
Cookies and similar technologies (like localStorage) are small pieces of data a site stores in your browser. Many sites load dozens of third-party trackers before you've clicked anything. We don't.
- Only essential storage runs by default.
- Analytics runs only after you click "Accept analytics" in the consent banner — a passive "this site uses cookies" notice isn't consent, so we don't use one.
- Analytics requests are routed through ThunderPhone paths such as
/ingestwhere possible, then processed by our analytics providers under their data-protection terms.
02Essential storage
Two things: your cookie choice, and sign-in session cookies in the dashboard.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| tp-cookie-consent | Records whether you accepted or declined analytics, so we don't ask again. | localStorage | 12 months, then we re-ask |
thunderphone_auth_token | Keeps you signed in to the ThunderPhone dashboard. | localStorage | Until logout, token expiry, or browser storage clearing |
thunderphone_selected_org_id and related workspace keys | Remembers your current workspace and product setup state. | localStorage | Until changed, logout, or browser storage clearing |
Essential storage can't be switched off — without it the site and dashboard don't work — but none of it tracks you across other sites.
03Analytics (consent-only)
OpenReplay and Google Analytics where configured. Off on the marketing site until you say yes.
With your consent on the marketing site, we run OpenReplay and Google Analytics where configured. We use these tools to understand page performance, product interest, and site issues; we do not sell the data or use it for cross-site behavioral advertising.
Inside the signed-in product dashboard, OpenReplay privacy-filtered session replay and product analytics may run where enabled to help us operate, secure, debug, support, and improve the service.
| Name | Purpose | Type | Duration |
|---|---|---|---|
__openreplay_* | Maintains privacy-filtered replay session identifiers and buffered telemetry where OpenReplay is enabled. | localStorage or sessionStorage | Provider defaults, typically session-scoped or up to 12 months unless shortened in configuration |
_ga, _ga_* | Google Analytics measurement where configured. | Cookie | Provider defaults, typically up to 24 months unless shortened in configuration |
Analytics data is typically retained for up to 24 months, then aggregated or deleted unless a shorter period is configured.
04What we don't use
- No advertising pixels (Meta, Google Ads, LinkedIn, or otherwise)
- No advertising analytics used to share or sell data
- No marketing-site session replay; product dashboard session recordings may run where enabled for support, debugging, and product improvement
- No cross-site tracking or fingerprinting
- No selling or sharing of data, ever
05Managing your choice
Change your mind anytime — right here, or in the footer of any page.
You can also clear or block storage in your browser settings; blocking essential cookies may break dashboard sign-in.
We honor the Global Privacy Control (GPC) signal: if your browser sends it and you haven't made a choice, we treat it as "essential only" automatically. We treat "Do Not Track" the same way.
06Questions
Email privacy@thunderphone.com. For the bigger picture, see our privacy policy.