Cookie & External Transmission Policy
Version 2026.2 · Last updated: 2026-08-30 · Effective: pending approval
ThutaTech services are currently in private beta: public sign-up is closed and no paid plans are on sale yet. Statements about accounts and billing describe how the Services will operate at public launch.
This is a draft pending legal review. It is not the final version and is not legal advice.
COOK-01 — Scope
This policy explains cookies, browser storage, and information transmitted from your device to external services ("external transmission") for each ThutaTech domain. It reflects what is actually implemented in each product; entries differ by domain. It also serves as our disclosure for Japan's external-transmission rules under the Telecommunications Business Act, to the extent they apply (final applicability to be confirmed at legal review).
COOK-02 — thutatech.com (this site)
The marketing site currently sets no analytics, advertising, or tracking cookies and loads no third-party analytics scripts. Fonts are served from this domain, so no font CDN receives your request.
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
NEXT_LOCALE | ThutaTech (first-party) | Remembers your chosen language | Cookie / 1 year | Yes — functional |
Other technically necessary mechanisms: locale routing via URL path and hosting-provider request logs. The contact page is a plain email link; this site operates no contact form and collects no form data.
COOK-03 — account.thutatech.com
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
Clerk session cookies (e.g. __session, __client_uat) | Clerk (US) | Authentication and session security | Cookie; session/short-term per Clerk defaults | Strictly necessary |
| Onboarding/notification preferences | First-party | Remember dismissed banners and settings | localStorage; until cleared | Functional |
No analytics or marketing scripts run on this domain. (PostHog was removed on 2026-07-18 by owner decision.)
COOK-04 — studio.thutatech.com
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
| Clerk session cookies | Clerk (US) | Authentication | Cookie | Strictly necessary |
| Sentry error reporting | Sentry (US/EU) | Error diagnostics; error events include technical context | Network transmission (no tracking cookie) | Functional/security |
| Liveblocks realtime collaboration | Liveblocks (US) | Live presence, comments, and co-editing sessions | WebSocket transmission during collaboration | Functional |
Cookie notice acknowledgement studio_cookie_consent | First-party | Records that you saw the cookie notice | localStorage; until cleared | Functional |
| Editor state (drafts, preferences) | First-party | Product function | localStorage/IndexedDB | Functional |
No analytics or marketing scripts run on this domain. (PostHog was removed on 2026-07-18 by owner decision.)
COOK-05 — app.thutatech.com (App Builder)
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
| Clerk session cookies | Clerk (US) | Authentication (shared sign-in with Account Center) | Cookie | Strictly necessary |
Consent record mobile_builder_cookie_consent | First-party | Stores your cookie choice (versioned) | localStorage | Functional |
| WebContainer preview runtime | StackBlitz (US) | In-browser execution of your generated app previews | Browser runtime storage during use | Functional |
No analytics or marketing scripts are currently present on this domain.
COOK-06 — flow.thutatech.com
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
| Clerk session cookies | Clerk (US) | Authentication | Cookie | Strictly necessary |
Consent record flow_cookie_consent | First-party | Stores your cookie choice | localStorage | Functional |
No analytics or marketing scripts are currently present on this domain.
COOK-07 — learn.thutatech.com (Thuta Learning)
The learning site has no accounts, no sign-in, and sets no cookies. Fonts are bundled at build time, so no font CDN receives your request. It runs one analytics technology, disclosed here:
| Item | Provider | Purpose | Type / duration | Required? |
|---|---|---|---|---|
| Vercel Web Analytics | Vercel (US) | Aggregate page-view statistics: page visited, referrer, country/region, device type, browser, and operating system. Cookieless — nothing is stored on your device. The provider derives a visitor hash from your IP address and browser signature that is discarded after 24 hours; your IP address itself is not retained. | Network transmission on each page view to a first-party endpoint on this domain, relayed to Vercel | Analytics — notice-based (see COOK-08) |
| Lesson progress, font size, theme | First-party | Remembers completed lessons and display preferences | localStorage; until cleared (a reset control is in the site footer) | Functional |
COOK-08 — Consent
Vercel Web Analytics on learn.thutatech.com is the only analytics technology on any ThutaTech domain. It is cookieless, stores nothing on your device, and does not track you across sites. We operate it on a notice basis under Japan's external-transmission rules and do not show a consent banner for it. ThutaTech serves users in Japan and Myanmar and does not target the EU/UK; where local law nevertheless requires a consent choice, analytics will not run before one is recorded.
No other ThutaTech domain runs analytics or marketing scripts (PostHog was removed on 2026-07-18 by owner decision), so everything else listed above is strictly necessary or functional. Product cookie banners exist as notices (and to record your acknowledgement). If we introduce any further analytics or marketing technology, this policy will be updated first, it will not run before a consent choice is recorded where the law requires one, and rejecting will be as easy as accepting.
COOK-09 — Desktop applications
Thuta IDE and the Thuta Agent desktop app are not websites and set no cookies. Their local storage and any external transmissions (update checks, user-directed AI calls) are described in their Product Terms and the Privacy Policy.
COOK-10 — Managing cookies
You can delete or block cookies in your browser settings; blocking strictly necessary cookies will break sign-in. Choices recorded in product consent banners are stored per domain — a choice on one domain does not automatically apply to other ThutaTech domains.
COOK-11 — Changes
We update this inventory when scripts or providers change. Version history is in the Legal & Trust Center.