Cookies Policy

Themis uses a small set of cookies and similar storage mechanisms to keep you signed in, to remember your locale choice, and to operate the service. We do not use cookies for advertising, cross-site tracking, or third-party analytics profiles.

1. Strictly necessary

These are required for the service to work. We do not ask for consent because the service cannot function without them.

• Clerk session cookies — keep you signed in and protect against CSRF. Domain: themis-legal.co and Clerk-managed subdomains.
• themis-locale — remembers your chosen interface language (EN or AR). Persists 365 days.
• themis.welcomeSeen (mobile only, AsyncStorage) — flags that you have seen the first-launch welcome carousel so we do not show it again.

2. Functional

• themis.splashShown (mobile, AsyncStorage) — per-session flag for the launch splash.
• themis.in-flight-firm-key-rotation (browser localStorage) — preserves an in-progress vault key rotation across a tab reload so a partner who started a rotation and refreshed the page does not lose the rotation envelope mid-flight.

3. Telemetry

• Sentry — error tracking. No advertising identifiers, no cross-site tracking. Only request metadata and error stack traces are sent.

4. What we do not use

• Google Analytics, Meta Pixel, or equivalent ad-tech trackers.
• Third-party advertising cookies.
• Cross-site fingerprinting.

5. Managing cookies

You can clear cookies and local storage from your browser's settings. Clearing the Clerk session cookie will sign you out; clearing the locale cookie will reset the interface to default. The service will not function without the strictly-necessary cookies.