Cookie Policy
Last updated: 9 February 2026 Effective date: 9 February 2026
This Cookie Policy explains how Theona, Inc. ("we," "our," "us") uses cookies and similar tracking technologies when you visit https://theona.ai and use our Services.
1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember information about your visit, such as your preferences, login status, and browsing history.
2. Types of Cookies We Use
2.1 Essential Cookies
Purpose: These cookies are necessary for the Services to function and cannot be disabled.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
sidebar_state | Theona | Remembers sidebar open/closed state in application | 7 days |
Note: Authentication tokens (Supabase) are stored in browser Local Storage, not cookies. See section 2.3 below.
2.2 Analytics & Performance Cookies
Purpose: Help us understand how users interact with the Services and identify areas for improvement. You can opt out in Privacy Settings.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga_RTKD7H1FMD | Google Analytics (GA4) | Website traffic analysis, page views, user behavior | 2 years |
ph_phc_..._posthog | PostHog | Product analytics in web application (app.theona.ai) | 1 year |
sentry-* | Sentry | Error monitoring and performance tracking (sanitized, no PII) | Session |
Note: Google Analytics is used on the marketing website (theona.ai). PostHog is used in the application (app.theona.ai) for product analytics.
2.3 Local Storage & Session Data
Important: Authentication tokens and user preferences are stored in browser Local Storage, not cookies. Local Storage persists until manually cleared and is not transmitted to our servers.
Stored in Local Storage:
- Supabase authentication tokens – JWT access and refresh tokens for login sessions
- User session data – Current user ID and session metadata
- Theme preference – Dark/light mode setting
- Language and locale – Preferred language and region
- UI preferences – Layout settings, sidebar state
- Analytics opt-out – Your privacy preferences
Local Storage data is stored on your device only and never sent to our servers automatically. Unlike cookies, it does not have an expiration date and persists even after closing the browser.
3. Third-Party Cookies
Some cookies are set by third-party services we use to provide the Services:
- Supabase – Authentication and database services
- Google Analytics (GA4) – Website traffic analysis and visitor insights (marketing website only)
Google Privacy Policy - PostHog – Product analytics and user behavior tracking (application only)
PostHog Privacy Policy - Sentry – Error monitoring (sanitized, no PII)
Sentry Privacy Policy - Stripe – Payment processing (only on checkout pages)
Stripe Privacy Policy
These third parties have their own privacy policies governing their use of cookies.
4. How to Manage Cookies
4.1 In-App Settings
You can manage your cookie preferences through the Privacy Settings page in your account:
- Opt out of analytics and performance cookies
- Disable session recordings
- Manage notification preferences
4.2 Browser Settings
Most browsers allow you to control cookies through their settings. Here's how to manage cookies in popular browsers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Manage cookies
Note: Blocking essential cookies may prevent you from logging in or using core features.
4.3 Opt-Out Links
- PostHog: Opt out in Privacy Settings or use the PostHog opt-out cookie
- Google Analytics: Google Analytics Opt-out Browser Add-on (if used)
5. Do Not Track (DNT)
Some browsers support a "Do Not Track" (DNT) signal. We respect DNT signals for analytics cookies. When DNT is enabled, we will not load PostHog analytics or session recordings.
6. Changes to This Policy
We may update this Cookie Policy from time to time. The "Last updated" date at the top indicates when changes were made. Continued use of the Services after updates constitutes acceptance of the revised policy.
7. Contact Us
If you have questions about our use of cookies, contact us:
Theona, Inc.
Email: [email protected]
For more information about how we handle your personal data, see our Privacy Policy.