Effective date: August 12, 2026
Last updated: September 24, 2026
1. About this policy
This policy explains how Thriveth uses cookies and similar browser technologies on thriveth.com and pages that link to it. The www and jobs hostnames only redirect to the same path on thriveth.com.
Thriveth is an eenmanszaak registered with the Dutch Business Register under number 59082852. Our address is Oder 20 Box D4441, 2491 DC The Hague, The Netherlands. Contact: info@thriveth.com.
2. Your choices before optional measurement
Thriveth uses necessary technology to deliver and secure features you request. Google Analytics and OpenAI homepage advertising measurement are separate optional choices. Their scripts are not requested and they send no measurement events until you allow the relevant choice. Accept allows both; Decline blocks both. Cookie settings lets you choose each separately.
If you decline or have not made a choice, both optional measurement tools remain blocked. A previous Analytics choice does not allow the new OpenAI pixel. Google advertising storage, advertising user data, advertising personalization, Google Signals, remarketing, personalized advertising, and embedded-video tracking remain off.
3. Necessary technologies
Privacy choice. Thriveth stores your separate Analytics and advertising measurement choices in first-party local browser storage under thriveth-consent-v2. This is needed to remember your choice and avoid asking again on every page. It remains until you change it, clear browser storage, or Thriveth replaces this consent version.
Sign-in and account security. Supabase authentication uses browser local storage to maintain a signed-in session. Temporary session storage supports secure sign-in, account recovery, and returning you to the requested Thriveth page. These technologies are needed only when you use account features.
Abuse prevention. Cloudflare Turnstile may use short-lived security technology on protected forms to distinguish genuine requests from automated abuse. It is used for security, not advertising.
Google sign-in. If you choose Google sign-in, Google may use necessary authentication cookies or similar technology under its own policies. Google sign-in is separate from Google Analytics and is loaded only when you request that sign-in route.
Delivery and normal browser operation. Vercel delivers the website and server responses. Your browser may keep normal cached copies of public files to load the service efficiently. Supabase provides the database and file storage used by requested site features.
4. Optional Analytics
With your consent, Thriveth uses Google Analytics measurement ID G-XTKC0DDEYV to understand how public pages are used and to improve content and navigation. Measurement is limited to public pages. The tag does not load on account, administrator, preview, embed, or API paths.
Google Analytics Enhanced Measurement is off. Thriveth sends controlled public page-view events only; automatic scroll, outbound-click, form, search, download, and video events are not enabled.
Analytics may process the public page title and canonical page URL or path, time of the visit, consent state, and technical information such as browser, device type, and approximate location. Thriveth does not intentionally send names, email addresses, account identifiers, form contents, private member data, or private review evidence to Google Analytics.
Google Analytics normally sets _ga and _ga_<container-id> cookies to distinguish browsers and sessions. Their default expiry is up to two years, although Google may refresh the expiry when the service receives data and you can remove them sooner through Cookie settings or browser controls. The Thriveth Analytics property retains event-level data for two months and user-level data for 14 months, with the current activity-reset setting applied to user data.
Thriveth uses Google's Basic Consent Mode. This communicates an accepted choice to the tag while keeping the tag physically blocked when consent is not available. It does not permit advertising purposes.
5. Optional homepage advertising measurement
With your separate consent, the OpenAI Ads Measurement Pixel loads on the production homepage and sends a page_viewed event on each consented homepage visit to help attribute visits from ChatGPT ads. It does not track signups, applications, account pages, or other site routes. The event may contain the site origin, visit time, ad-click attribution identifier, browser reference, and technical browser information. Thriveth does not intentionally send names, email addresses, account identifiers, form contents, private member data, or review evidence. The event is opted out of future user-level personalization. If you decline, no pixel event is sent; blocked visits are not replayed later.
After consent, the pixel may set two first-party cookies: __oppref retains an ad-click attribution identifier for up to 30 days after it is written, and __obref retains a browser reference for up to 365 days after creation. Withdrawing this choice calls the pixel consent control to remove both cookies and reloads the page without the pixel.
6. Providers and international processing
The providers involved in browser delivery and necessary storage are Vercel, Supabase, Cloudflare Turnstile, and Google only when Google sign-in is chosen. Resend sends requested account and transactional emails but does not place browser cookies on the Thriveth site.
Google also receives optional Analytics data only after consent. OpenAI receives optional homepage advertising measurement data only after separate consent. These providers or their subprocessors may process data outside the European Economic Area under the safeguards described in the Privacy Policy. Google's explanation of how it uses information from sites that use its services is available at https://policies.google.com/technologies/partner-sites.
Local sign-in data remains until sign-out, expiry, account closure, or browser storage is cleared. Temporary sign-in, recovery, and return-path information ends with the browser session or requested flow. Security tokens are short-lived. Normal browser cache retention is controlled by the browser and Thriveth's delivery headers.
7. Your controls
The compact consent banner offers equally prominent Accept and Decline choices. A permanent Cookie settings control appears in the Information section of the website footer for more detail or to change the choice later.
You can withdraw Analytics or advertising measurement consent separately at any time without affecting necessary features. When you disable Analytics, Thriveth clears accessible Google Analytics cookies. When you disable advertising measurement, the pixel removes its attribution cookies. The page reloads without any disabled measurement script. You can also clear cookies and local storage through your browser, although doing so may sign you out or interrupt an account recovery or sign-in flow.
If you choose Google sign-in or follow a link to an external company website, that provider may use its own technologies under its own privacy and cookie policies. Thriveth does not control external websites.
8. Changes and contact
We update this policy when our use of these technologies changes. We will provide the required information and obtain consent before loading any new non-essential purpose. Questions can be sent to info@thriveth.com.
Application link totals
We count how often application, referral, and employer sign-in links are opened to understand which opportunities are useful and improve Thriveth. Our private report contains daily totals by job and link type, with job and company labels. It contains no visitor or member identifiers, sign-in status, IP addresses, individual click times, or browsing histories. We retain totals for 90 calendar days. Repeated opens may count again; totals do not identify unique people or confirm an application.
Thriveth forwards the requested link through its own server. Our hosting provider, Vercel, necessarily receives the IP address and ordinary request information to deliver and secure the service. Hosting security and operational logs are separate from the totals stored with Supabase and are not used to build visitor analytics profiles. We rely on our legitimate interests in operating and improving Thriveth for this limited processing, with data minimization and no visitor-level analytics records. No tracking cookie or browser identifier is created for this counter. These totals are not sent to Google Analytics or advertising services. Google Analytics and advertising measurement remain separate consent-based choices.