Cookie Policy
Cookie Policy
Last updated: August 10, 2025
This Cookie Policy explains how Strathex Systems LLC (“we,” “us,” “our”) uses cookies and similar technologies on The Thai Road (the “Site”). Read this together with our Privacy Policy and Terms of Service.
Controller / Merchant of Record: Strathex Systems LLC (Wyoming, USA)
Business Address: (BUSINESS ADDRESS COMING SOON)
Contact: support@thethairoad.com | +1 (417) 741-3339
We run an editorial, age-restricted directory (no UGC, no explicit hosting). Our approach is region-aware: we obtain consent where law requires it and give clear controls everywhere.
1) What are cookies and similar technologies?
Cookies are small files placed on your device to recognize your browser and remember settings. Similar technologies include localStorage/sessionStorage, pixels/web beacons, and server logs. We treat these like cookies for choices and transparency. Cookies can be first-party (set by us) or third-party (our providers), and session (expire when you close your browser) or persistent (stay until they expire or you delete them).
2) Categories we use
- Strictly Necessary (Essential) – required for core functionality (security, authentication, consent logging, access-pass flow). Legal basis: not subject to consent under EU/UK ePrivacy, but disclosed here.
- Analytics (Performance/Measurement) – aggregate usage to improve the Site (no ad retargeting). Legal basis: consent in EU/UK/EEA/CH; outside those regions we provide easy opt-out and honor Global Privacy Control (GPC).
- Functionality – remember optional preferences (e.g., language). Legal basis: consent in EU/UK/EEA/CH if not strictly necessary.
- Advertising/Targeting – not in use today. If we enable these later, we will (i) update this Policy and our banner, (ii) require opt-in where applicable, and (iii) add a “Do Not Sell or Share” link for CPRA.
3) What’s set today (update this table to match your build)
Replace placeholders with your actual entries before launch.
| Name | Provider | Category | Purpose | Type | Typical Expiry |
|---|---|---|---|---|---|
| cookie_consent | The Thai Road | Strictly Necessary | Stores your cookie choices (on/off by category), region, timestamp. | 1st-party, persistent | 12 months |
| session_id | The Thai Road | Strictly Necessary | Maintains logged-in session and access-pass gating. | 1st-party, session | End of session |
| csrf_token | The Thai Road | Strictly Necessary | Protects forms/checkout from CSRF. | 1st-party, session | End of session |
| __cf_bm / __cfruid (if using Cloudflare) | Cloudflare | Strictly Necessary | Bot management, rate-limiting, performance. | 3rd-party, persistent | ~30 minutes / variable |
| lang_pref | The Thai Road | Functionality | Remembers language/locale preference. | 1st-party, persistent | 6 months |
| _ga / _ga_* (or vendor equivalent) | Analytics vendor | Analytics | Aggregate usage metrics; IP masking; no ad personalization. | 1st/3rd-party, persistent | 13 months (or vendor default) |
| _consent_log | The Thai Road | Strictly Necessary | Records banner version, choices, and GPC status for audit. | 1st-party, persistent | 24 months |
Advertising/Targeting: None in use. We’ll update this page and our banner before enabling any.
4) Your choices (consent, change, withdraw)
- Banner: On first visit, you’ll see a banner. In EU/UK/EEA/CH, non-essential categories are off by default and load only if you opt in. Outside those regions, we provide equivalent controls and clear notice.
- Cookie Settings: Change or withdraw choices anytime via the “Cookie Settings” link in our footer.
- Global Privacy Control (GPC): If your browser sends a valid GPC signal, we treat it as an opt-out of analytics (and as a “do not sell/share” preference where applicable) even if you don’t interact with the banner.
- Browser controls: You can delete or block cookies in your browser. Blocking Strictly Necessary cookies may break login, access-pass gating, or checkout.
5) Regional specifics & legal bases
EU/UK/EEA/CH: We follow ePrivacy and GDPR/UK GDPR. Strictly Necessary cookies may be set without consent; Analytics/Functionality require opt-in consent. Our bases are consent (non-essential) and contract/legitimate interests (essential operation and security).
United States (CPRA and other state laws): We do not “sell” or “share” personal information for cross-context behavioral advertising. If this changes, we’ll (i) add a “Do Not Sell or Share My Personal Information” link, (ii) update this Policy and the banner, and (iii) continue honoring GPC.
6) How long we keep cookies and consent logs
Cookie durations: see the table above (or the vendor’s defaults if shorter).
Consent records: we keep a minimal log of your choices (timestamp, region, banner version, GPC status) for 24 months to demonstrate compliance. We re-prompt for consent at least every 12 months or sooner if our practices materially change.
7) Similar technologies we use
- LocalStorage/SessionStorage for preference and security tokens (treated like cookies).
- Pixels/Web beacons for basic delivery or analytics (never for ad retargeting unless added later with proper controls).
- Server logs (IP, user agent, timestamp) for troubleshooting, security, and anti-fraud.
8) Security & privacy safeguards
TLS/HTTPS site-wide; least-privilege access; MFA for admin; logging/alerting. Analytics (when enabled) configured with IP masking/no ad personalization and the shortest feasible retention. Payments handled by PCI-DSS compliant processors; we do not store full card numbers.
9) Updates to this Policy or your settings
We may update this Policy and the cookie table to reflect technology or legal changes. Material changes will show a new “Last updated” date, and we’ll re-prompt for consent where required. You can adjust choices anytime via “Cookie Settings.”
10) Contact
Strathex Systems LLC
(BUSINESS ADDRESS COMING SOON)
support@thethairoad.com | +1 (417) 741-3339