Cookies
Thalovant Cookie Policy
The browser storage Thalovant uses, which of it is essential, and how optional analytics stays off until you allow it.
1. What cookies and browser storage are
Cookies are small files a website stores in your browser. Similar technologies, such as the browser's local storage, work in the same way. Both can be read back when you return. Laws such as the EU ePrivacy rules and Quebec's Law 25 require consent for storage that is not strictly necessary, and require tracking technologies to be off by default.
2. Essential storage
This storage is strictly necessary to provide the website and the service you ask for, or to remember a choice you made. It does not need consent.
| Name | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
thalovant-theme | thalovant.com | Local storage | Remembers light or dark display mode | Until you change or clear it |
| Display preferences | docs.thalovant.com | Local storage | Remembers your chosen display theme | Until you change or clear it |
hivemind-cookie-consent | Each of the four sites above | Local storage | Remembers your choice separately on that site and when you made it | Until you change or clear it |
| Session and security cookies | dash.thalovant.com | Cookies | Keep you signed in, protect sign-in and forms against forgery, and secure your session | Session, or as long as you stay signed in |
Security cookies (for example __cf_bm) | Cloudflare, on our domains | Cookies | May be set by our edge network to tell people from bots and block attacks | Up to 30 minutes |
| Payment cookies | Stripe, on its checkout pages | Cookies | Fraud prevention and payment processing during checkout | Set by Stripe; see Stripe's cookie policy |
3. Analytics (only with your consent)
If you choose "Allow analytics", we load Google Analytics (measurement ID G-12FJWBZMJS) on the site where you made that choice. The four sites use the same reporting stream to understand page visits and coarse interaction categories in aggregate. A shared Thalovant analytics cookie can connect visits between these sites only where analytics has been allowed; accepting on one site does not accept on the others.
Reports use page categories, content language and registered campaign labels. We do not send conversation or prompt text, form contents, arbitrary URL queries or fragments to Analytics. Referrers are reduced to the referring website's origin, without its page path or query. Only a limited list of campaign source, medium and campaign names is accepted; free-text campaign terms and content are excluded.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
thalovant_ga | Google Analytics, across our sites after consent | Distinguishes consented visitors | Up to 1 year, without extending expiry on each visit |
thalovant_ga_<container-id> | Google Analytics, across our sites after consent | Keeps session state | Up to 1 year, without extending expiry on each visit |
Before you choose, Google Analytics is not loaded. We use Google's consent mode with advertising storage, ad user data and ad personalisation set to "denied", so analytics data is not used for advertising. Google processes this data as our subprocessor; see the Subprocessors page and Privacy Notice.
4. Your choices
4.1 Cookie settings. Use "Cookie settings" at the bottom of any page to allow or refuse analytics, or to change your earlier choice. Refusing is as easy as accepting: "Essential only" sets your choice in one click.
4.2 Withdrawing consent. If you switch analytics off, we stop analytics on that site and remove its accessible Thalovant-prefixed analytics cookies, including the shared Thalovant identifier. This does not change your saved consent choice on another site. We leave unrelated cookies, sign-in storage and ambiguous older shared _ga cookies untouched; you can remove older cookies in your browser. A library still loading cannot override your withdrawal.
4.3 Browser settings. You can block or delete cookies and local storage in your browser. If you block essential storage, sign-in and some preferences may stop working.
5. Changes and contact
We update this policy when the storage we use changes. Questions: privacy@thalovant.com.
Version 2026-10-01. Available in English and French. Applicable language rights are preserved. Version française. Questions: support@thalovant.com.