Effective Date: May 11, 2026
This policy explains what cookies and similar technologies VidThanks uses, what each one does, and how to control them. It applies to the website at vidthanks.com and to the signed-in studio application at the same domain. It complements — and is governed by — our Privacy Policy.
Quick action: You can change your cookie choices at any time. opens the same panel that appeared the first time you visited.
A cookie is a small text file stored on your device by your browser. We also use technologies that aren't technically cookies but behave the same way — localStorage entries, pixel beacons, and JavaScript SDKs that read your IP address. Throughout this policy we use "cookie" as shorthand for all of them, which is the convention recommended by the European Data Protection Board.
We group every tracker into one of three categories. Strictly necessary cookies run on every visit because the site cannot function without them. The other two categories are opt-in: they run only if you accept them, and you can change your mind at any time. Cookies you reject are not loaded — they don't set, read, or transmit anything from your device.
Required for the site to function. These keep you signed in, protect against fraud, and remember which language you chose. They cannot be switched off because the site cannot operate without them.
| Tracker | Host |
|---|---|
Firebase Authentication session Third-party Purpose: Keeps you signed in as you move between pages. Without this you would be signed out on every navigation. Retention: Session + persistent (1 hour refresh token, 30-day session window). | firebaseapp.com |
CSRF / anti-fraud token First-party Purpose: Verifies that requests originate from a real browser session and not a forged cross-site post. Used on every form submission. Retention: Session. | vidthanks.com |
Cookie-consent record First-party (localStorage) Purpose: Stores your cookie preferences so we don't prompt you again until you ask us to. Stored in localStorage rather than a cookie. Retention: 12 months from your last decision. | vidthanks.com |
Help us understand which pages are useful and which are slow or confusing. Aggregated and pseudonymous — never used to identify you personally or to target advertising. Off by default; runs only after you agree.
| Tracker | Host |
|---|---|
Google Analytics (gtag, G-50KW7SXPEM) Third-party Purpose: Page-view and event measurement. IP addresses are anonymised before storage. We do not enable Google Signals, demographics, or advertising features. Retention: Up to 14 months in Google Analytics; on this device, _ga and _ga_* cookies for up to 24 months. | googletagmanager.com / google-analytics.com |
Help us recognise the companies that visit our marketing pages (not individuals) so our sales team can follow up with the right context. These only fire on public pages — never inside the signed-in app. Off by default; runs only after you agree.
| Tracker | Host |
|---|---|
Reb2b (workspace 9NMMZHR8XENW) Third-party Purpose: B2B visitor de-anonymisation. Matches visiting IP addresses to the company that owns them so we can prioritise outreach. Identifies organisations only, never individuals. Retention: Up to 12 months in Reb2b; small first-party correlation cookie on this device for 12 months. | ddwl4m2hdecbv.cloudfront.net |
Your cookie preferences are stored in your browser's localStorage for 12 months. After that we will prompt you again, which is the cadence regulators (the UK ICO and the French CNIL) currently recommend. We will also prompt you sooner if we add a new tracker or change the purpose of an existing one — that's what the version number on the stored record is for.
In addition to the preferences panel on this site, every modern browser lets you block cookies entirely or delete cookies that have already been set. The exact menu depends on your browser:
Blocking strictly-necessary cookies at the browser level will prevent you from signing in. Blocking the optional categories is equivalent to rejecting them in our preferences panel.
We honour the Global Privacy Control (GPC) signal: if your browser sends a GPC header, we treat that as a request to disable the "Marketing & B2B identification" category, in line with the California Privacy Rights Act and the Colorado Privacy Act. Standard Do-Not-Track headers are not yet a clear legal signal in most jurisdictions, so we do not act on those automatically — but you can always set your preference manually with the button above.
When we add, remove, or change the purpose of a tracker we will update this page and increment the consent version, which causes a fresh consent prompt on your next visit. The most recent substantive change to this policy was its initial publication on the effective date above.
Questions about cookies, this policy, or how to exercise your rights under GDPR / CCPA / PDPA can be sent to legal@vidthanks.com.