Cookies & Consent
This page explains how cookies and consent work on TimberCloud. The authoritative document is the Cookie Policy.
The four categories
When you manage your cookie choices, TimberCloud groups cookies and trackers into four categories. Only the first is always on; the other three are off until you opt in.
| Category | What it covers | On by default? |
|---|---|---|
| Strictly necessary | Sign-in, security, multi-tenant routing, and payment fraud-prevention — the things the site needs to work at all. | Always on |
| Analytics | Understanding how the dashboard is used, so we can improve it (PostHog, Vercel, Cloudflare). No session replay. | Off until you opt in |
| Marketing & support chat | Live chat and marketing tools such as Intercom and Calendly, plus product walkthroughs (Supademo). | Off until you opt in |
| Preferences & media | Embedded media — YouTube, Vimeo, and Loom videos — and other non-essential conveniences that may set cookies. | Off until you opt in |
Note: "Preferences & media" is about embedded video and similar conveniences, not your light/dark theme. Your theme choice is stored without any cookie in the "Preferences & media" category.
Consent-first
When you first visit, only strictly-necessary cookies are set. Non-essential cookies and trackers (Analytics, Marketing & support chat, and Preferences & media) fire only after you opt in through the cookie banner. There are no pre-ticked boxes and no implied consent — the banner gives equal-weight "Reject all" and "Accept all" choices, plus a "Manage preferences" panel where you can turn categories on individually.
Changing or withdrawing consent
Use the "Cookie preferences" control in the site footer at any time (it is also reachable from the banner). Withdrawing is as easy as granting — turning a category off stops the corresponding trackers. Your choice is remembered so you are not re-asked on every visit; we re-prompt only after 180 days, or sooner if the policy changes materially.
There is also a California "Do Not Sell or Share My Personal Information" notice in the banner for visitors in the applicable region.
What we use
Non-essential trackers include PostHog (product analytics; session replay is disabled), Vercel Analytics, and Cloudflare Insights under Analytics; Intercom (chat), Calendly, and Supademo under Marketing & support chat; and embedded YouTube/Vimeo/Loom videos under Preferences & media. Stripe.js loads only on payment pages and is strictly necessary. Per-merchant Google Analytics and Google Maps (address autocomplete) may also load on storefronts.
See the Cookie Policy for the full per-cookie and per-tracker tables (name, provider, purpose, duration), and the Sub-processors page for the third parties behind them.
White-label storefronts
On storefronts TimberCloud hosts on a merchant's own domain, the merchant's cookie banner governs where present; otherwise a minimal consent control is shown. TimberCloud and the merchant may be joint controllers for certain analytics — see the Data Processing Addendum.
Next Steps
- Privacy & Your Data — what we collect and how to export or delete your data
- Sub-processors — the third-party services behind these trackers
- Privacy & Legal overview — quick answers and the binding policy links
Contact
Cookie and consent questions: privacy@timbercloud.com.