Cookie Protocols

A technical breakdown of client-side persistence, session storage, and how we respect your browser state.

Themes Jet believes in a stateless web wherever possible. However, to maintain your authentication session, secure your cart, and remember your dark mode preference, we utilize specific HTTP Cookies and Local Storage mechanisms. We do not use third-party advertising pixels.

Strictly Necessary

• Auth Tokens: Encrypted JWTs to keep you logged in securely (NextAuth).
• CSRF Protection: Tokens that prevent Cross-Site Request Forgery attacks.
• Payment Intent: Stripe session IDs to process your checkout flow.

Performance & UX

• UI State: Storing your "Dark Mode" or "Light Mode" preference.
• Telemetry: Vercel Analytics (Anonymous) to measure page load latency.
• Cache: Temporary local data to speed up page transitions.

Managing Your State

You retain full control over your browser's local storage. You can block or delete cookies through your browser settings (Chrome://settings, Safari Preferences, etc.).

Note: Blocking "Strictly Necessary" cookies will render the dashboard, login, and checkout systems non-functional.

Third-Party Ingestion

We minimize external dependencies, but the following providers may set cookies to ensure the application functions correctly:

StripeFraud detection & Payment processing.
GitHub / GoogleOAuth session management (only if you log in via these).

Zero-Ad Policy

We do not participate in cross-site tracking, remarketing, or data brokering. Your cookies on Themes Jet are used exclusively to make Themes Jet work.