Cookie policy

1. Cookies and local storage

A cookie is a small text file a website saves in your browser and reads back on later visits. Local storage does the same job without being sent to the server with every request. Both are covered by this policy, and by the same rules in the law: what is strictly necessary for a service you asked for needs no consent; the rest does where the law requires it.

The tables below sort each entry into one of three types:

• Necessary: the service can't work without it (signing in, keeping a conversation open).
• Preference: remembers a choice you made, such as the layout of the dashboard.
• Measurement: counts the orders that follow a conversation, for the store's sales numbers.

2. This website

strathly.com is a set of static pages. It sets no cookies and uses no local storage, and it loads no analytics, advertising or social media tags. Your browser loads nothing from third parties: the fonts and images come from strathly.com itself.

The pages are delivered through Cloudflare's network, as the privacy policy describes. Cloudflare sets no cookies on them either. Only if its network flags a visit as possibly automated and asks the visitor to pass a security check may it set its own strictly necessary cookie, cf_clearance, to remember that the check was passed. It is not used for tracking.

Signing in and signing up happen on app.strathly.com, which sets its own cookies, described below.

3. The app (app.strathly.com)

The dashboard where merchants and their teams work uses these cookies. All of them are first-party (set by app.strathly.com) and none is used for advertising or analytics.

• __Secure-better-auth.session_token

  Keeps you signed in. Without it you would have to log in on every page.

  Cookie30 days, renewed while you use the appNecessary
• strathly_shopify_nonce

  Protects the Shopify connection step against forged requests.

  Cookie10 minutesNecessary
• strathly_from_shopify

  Remembers which Shopify store sent you here when you start the install in Shopify, so the app connects that store.

  Cookie24 hoursNecessary
• strathly.sidebar.collapsed

  Remembers whether you collapsed the dashboard's sidebar.

  Cookie1 yearPreference
• strathly.sidebar.inbox

  Remembers how wide you like the sidebar in the Inbox.

  Cookie1 yearPreference
• strathly.viewport

  Remembers your screen size class, so the dashboard loads in the right layout without a jump.

  Cookie1 yearPreference

The app is delivered through Cloudflare's network too, as the privacy policy describes. As on this website, Cloudflare sets no cookies of its own, except cf_clearance if it asks a visitor to pass a security check.

Choosing a plan. The app loads no payment form. Starting or changing your plan opens Shopify's plan page in your Shopify admin, where Shopify's own cookies and policies apply.

Every cookie of the app is either strictly necessary or remembers a choice you made in it, so the app needs no consent and shows no cookie banner. The Strathly iOS app uses no cookies in a browser: it keeps your sign-in in the iPhone's Keychain, encrypted by iOS, until you log out.

4. The chat on stores

When a store runs Strathly, the chat on its storefront keeps these entries in the shopper's browser, in local storage on the store's own domain. They hold random IDs and timestamps only: no name, email or message text. Nothing is stored until the shopper opens the chat or writes in it.

• strathly_vid

  A random ID for this browser, created when the shopper opens the chat or sends a message, so the chat can show the shopper their own conversation when they come back.

  Local storageUntil the shopper clears the site's dataNecessary
• strathly_conv_<store>

  The conversation the chat opens on (or the new one the shopper asked to start), so it survives a page change or a reload.

  Local storageUsed for 7 days, then replacedNecessary
• strathly_act_<store>

  When the shopper last talked with Ivy, to link an order placed within 3 days to the conversation. Set only when the store's cookie banner allows it.

  Local storage3 days, then deletedMeasurement

The cart attribute. After a conversation the chat may also add the conversation's ID to the shopper's Shopify cart, as a cart attribute named _strathly_conversation. Shopify keeps it with the cart (under Shopify's own cart cookie) and copies it onto the order, which is how the store counts orders placed within 3 days of a conversation. It is not a cookie of ours, and it carries nothing but that ID.

Fonts. The chat's fonts come from our own servers, together with the chat itself, so the shopper's browser contacts no third party for them. They set no cookies.

The bot check. When a conversation starts, the chat runs Cloudflare Turnstile, an invisible check that a person, not a bot, is writing, in a hidden frame served by app.strathly.com. We set no cookies or storage for it. Cloudflare receives the shopper's IP address and technical signals from the browser for the check, as the privacy policy and the subprocessors page describe.

5. How to control them

• Every browser lets you see and delete cookies and site data, and block them for a site or for all sites. Look for “Cookies and site data” or “Privacy” in its settings.
• If you block the app's session cookie, you can't stay signed in to Strathly.
• If you clear a store's site data, the chat forgets your conversation in that browser and starts a new one. The store keeps the conversation you had; ask the store if you want it deleted.

6. Changes

When we add, remove or change a cookie or storage entry, we update this page and the date at the top. Our privacy policy explains everything else about how we handle personal data.

7. Contact

Questions about cookies: support@strathly.com.