Cookie notice
Small files. Clear choices.
A Tholi-specific record of how the website and extension work, what stays on your device and where your choices apply.
Updated October 25, 2026. Tholi’s website is published at https://tholi.io and hosted on Cloudflare Pages. Professional legal review remains pending.
A choice that changes actual storage
This website uses a necessary cookie to remember your consent decision and an optional cookie to remember Light or Dark appearance. Reading, downloading and practicing work without optional storage. Closing the notice or continuing to browse does not grant consent.
Essential only declines optional storage. Allow preferences permits the appearance cookie. Settings lets you review the same choices. You can reopen Cookie settings from every page’s footer.
Cookies in this build
| Cookie | Purpose | Lifetime | Choice |
|---|---|---|---|
tholi_consent | A versioned record of the choices you make. Contains no account credentials or navigation destination. | 180 days from a saved choice. | Necessary choice record. |
tholi_theme | Your selected Light or Dark website appearance. | Up to 180 days; removed when preference storage is withdrawn. | Only after preferences are allowed. |
Both cookies are first-party and host-only, use Path=/ and SameSite=Lax, and are marked Secure on HTTPS. The HTTP localhost preview cannot use a Secure-only cookie. These cookies are readable by the website; they are not authentication tokens.
Appearance without optional storage
The website starts in Dark appearance. If you allow preference storage, your selected appearance can be restored on a later visit before the page paints. If you decline preferences, your choice works in memory for the current page session and is not written to a theme cookie.
Withdrawing preferences deletes the appearance cookie and stops future preference writes. If your browser blocks cookies entirely, controls still work for the open page, but the site cannot remember your choice after a reload.
Cloudflare measurements and optional analytics
On tholi.io, Cloudflare injects a measurement script that reports page views and page-load performance. The script loads from static.cloudflareinsights.com and sends measurements to /cdn-cgi/rum. These host-level measurements run independently of Tholi’s cookie choices; choosing Essential only does not disable them. See Cloudflare’s data collection documentation.
The app’s own optional analytics provider is inactive. Its consent gate applies to a future provider added by Tholi. It cannot activate collection without that provider’s identity and disclosures plus fresh provider-specific consent. Eligible future events are limited to page views, download clicks and practice start or completion. Destination text, conversations, account details, documentation searches and extension observations are excluded.
For that future app provider, withdrawing consent stops optional events and clears pending work. Its identity and retention period will be listed here before activation. This gate does not control scripts added by the hosting platform.
Other browser storage
The public website does not use account sessions or store account details. Earlier website demonstrations may have left a tholi-demo-account entry in browser-session storage. This version does not read or write it. You can remove that legacy entry with your browser’s site-data controls; session restoration can affect when the browser clears it automatically.
The extension has its own local and session stores, separate from website cookies. Cookie settings do not erase extension knowledge or journeys. Use the extension’s Reset current session, Forget and Clear controls for those purposes. See the privacy notice.
Questions and changes
This notice is maintained by ILUNỌNSEN LLC in Ohio, United States. Contact [email protected]. If the purpose or provider changes, we will update the notice and request a new choice where needed.
The controls follow the principle that choices must govern actual storage and processing. See the ICO’s practical consent guidance. This implementation is not a claim of certified compliance in every jurisdiction.