Resource CenterLegal
Version 2026-10-24-draft
Draft pending legal review. This text describes how the service works today and may change before it is final.
Inside the app, Nocthink uses a small number of cookies and browser storage entries, all of them needed to run the service or to remember a choice you made. Our public website (the home page, product, pricing, help and policy pages, but not the app) also uses Google Analytics to count visits. We do not use advertising cookies.
How we handle personal data more broadly is set out in the Privacy Policy.
| Name | Purpose | Lasts |
|---|---|---|
| nocthink.session_token | Keeps you signed in. HttpOnly, so page scripts cannot read it. Over HTTPS the browser shows it with a __Secure- prefix. | 14 days, or until you sign out |
| d1_bm | Makes sure you read back what you just saved, by routing reads to an up-to-date database copy. HttpOnly. | 1 hour |
| sidebar_state | Remembers whether you left the app sidebar open or collapsed. | 7 days |
These values stay in your browser and are not sent to our servers with each request.
| Name | Purpose | Lasts |
|---|---|---|
| theme | Your light, dark or system appearance choice. | Until you clear it |
| org-branding-cache | Your organization’s logo and colours, so they appear before the page finishes loading. | Until you clear it |
Google Analytics tells us which pages of nocthink.com are read and how visitors arrive. It runs only on the public website, never after you sign in, so nothing from your organization's records is sent to Google. It sets these cookies:
| Name | Purpose | Lasts |
|---|---|---|
| _ga | Google Analytics: a random identifier that tells one visitor's page views apart from another's. | 2 years |
| _ga_7D703WWSCL | Google Analytics: keeps the state of your current visit to our website. | 2 years |
Cloudflare Turnstile protects public forms such as sign-up and password reset from bots. It runs a challenge in your browser and may store what it needs to complete that check.
Polar handles subscription checkout. When an owner pays, the checkout page is served by Polar and its own cookie policy applies.
Organizations can add Nocthink’s analytics tag to their own websites. That tag sets no cookies: it keeps a random visit identifier in session storage, which the browser discards when the tab closes.
You can block or delete cookies in your browser settings. If you block the session cookie you will not be able to sign in; clearing the others only resets the preferences they remember. Blocking the Google Analytics cookies, or using Google's opt-out browser add-on, has no effect on how the website or the app works.
Questions? See Help & Support or contact us.
