Legal
Last updated: 18-07-2026
Thridy is built and operated by an independent product designer, and this policy describes exactly what data the site touches, in plain language. The short version: we collect the minimum needed to run a free icon library well, we never sell your data, and analytics only run if you allow them.
Account data. If you sign up: your name, email address, and password (stored as a secure hash, never in plain text). With Google sign-in we receive your name, email, and profile picture from Google.
Activity. Downloads, favourites, icon requests, and searches on the site, together with country, IP address, and browser type. This tells us which icons matter and which searches come up empty, which directly decides what gets made next.
Newsletter. The email address you subscribe with, its source, and delivery events for the emails we send (delivered, opened, clicked) so we can see what is worth writing.
Support. Whatever you write in the support form, plus the email you give us to reply to.
We do not sell your data, rent it, or share it with advertisers. There are no third-party ad networks on Thridy. Emails from us always have a working unsubscribe link.
Running Thridy relies on a small set of processors, each receiving only what its job needs:
Cloudflare hosts the site, the API, the database, and file storage. Resend sends our emails (account emails, the weekly Journal recap, support replies). Google provides optional sign-in. Google Analytics and PostHog provide usage analytics, and load only after you allow analytics cookies (see the Cookies policy). PostHog also records anonymised session replays with all typed input masked, and stores that data in the United States, which means an EU or UK visitor who accepts analytics has that data transferred outside their region. OpenAI powers icon generation and Journal drafting; your personal data is not used to train models on our behalf.
Account data stays until you delete your account. Activity events are kept for product analytics and pruned periodically. Newsletter data stays until you unsubscribe; unsubscribed addresses are kept on a suppression list only so we never email them again.
You can unsubscribe from every email with one click, decline or withdraw analytics consent at any time from Cookies Settings in the footer, and request a copy or deletion of your data by writing to info@thridy.com. Deletion requests are honoured within 30 days.
If how we handle data changes, this page changes first and the date above is updated. Significant changes will be announced on the site.
Questions about any of this? Write to info@thridy.com or use the support form. You will get an answer from a human.