Legal · Last updated 1 November 2026
Cookie Policy
What GreenThread stores in your browser, why, and how you can control it.
1. Summary
GreenThread uses only cookies and browser storage that are strictly necessary to provide the service you ask for: keeping you signed in, keeping your account secure and remembering choices you make. We do not use analytics, advertising, social media or tracking cookies, and we do not embed third-party media that sets cookies. Because of this, the Privacy and Electronic Communications Regulations (PECR) do not require us to ask for consent, and we do not show a cookie banner.
2. Cookies we use
| Cookie | Purpose | When it is set | How long it lasts |
|---|---|---|---|
__Secure-authjs.session-token | Keeps you signed in after you log in. | When you sign in | Up to 12 hours, or until you sign out |
__Host-authjs.csrf-token | Protects sign-in and forms against cross-site request forgery. | When you open a sign-in page | Until you close your browser |
__Secure-authjs.callback-url | Remembers which page to return you to after signing in. | When you open a sign-in page | Until you close your browser |
gt_acct_state | Security check while you connect an accounting system (Xero or QuickBooks). | Only when you start that connection | 10 minutes |
gt-lang | Remembers the website language you chose. | Only when you pick a language | 1 year |
All of these are first-party cookies set by GreenThread itself. The sign-in cookies cannot be read by scripts on the page.
3. Other browser storage
We also save a small amount of information in your browser's local storage. It stays on your device and is not sent to us.
| Item | Purpose | When it is set |
|---|---|---|
theme | Remembers whether you chose light or dark mode. | When you use the light/dark toggle |
gt:last-email | Pre-fills your email on the sign-in page. | When you sign in with "Remember my email on this device" ticked (untick it to remove) |
4. How to control cookies
You can view, block or delete cookies in your browser settings. If you block the sign-in cookies you can still read the public website, but you will not be able to sign in to GreenThread. Clearing your browser's site data also removes the local storage items above.
5. Changes
If we ever add cookies that are not strictly necessary, such as analytics, we will update this page and ask for your consent before setting them.
6. Contact
GreenThread is operated by Duckham Meridian Group Ltd, trading as DMG. Questions about cookies: [email protected]. For how we handle personal data generally, see our Privacy Policy.