Cookies and browser storage
Last updated 29 September 2026
The short version
- One cookie keeps you signed in. There are no advertising or tracking cookies.
- Google Analytics, which counts visits to our public pages, is off until you say yes. It then sets two cookies. If your browser sends Global Privacy Control we never load it and never ask.
- Everything else we keep in your browser is there because you did something: a setting you chose, work you are editing, a note you left. None of that needs your consent under EU or UK law, because each item is necessary for something you asked for.
This page lists every cookie and every item 3D Thing stores in your browser, on our website and in the editor and viewer at the separate editor address. Anything that needs your consent, which today is analytics only, is off until you agree, and is listed here.
Cookies
All three are set by our server, only after you sign in or start signing in, and are sent only to us.
| Name | What it is for | How long |
|---|---|---|
3dt_session | Keeps you signed in. Page scripts cannot read it. | 30 days, or until you sign out |
3dt_oauth | Protects the Sign in with Google step against forgery. | 10 minutes |
3dt_sso | Protects a team single sign-on step against forgery. | 10 minutes |
Analytics, only if you agree
We use Google Analytics to count visits to our public pages: the home page, features, pricing, documentation, the legal pages, and sign in and sign up. It tells us which pages are opened, on what kind of device and browser, roughly where in the world and which site sent the visitor. We turn off Google's advertising features and do not send it your name, email address, account or anything from your projects. It does not run on the pages you see when signed in, in the editor or the viewer, on a link somebody published, or in the free viewer at /inspector.
Nothing is loaded from Google, and no analytics cookie is set, until you say yes. You can say no, and you can change your answer here at any time. Saying no or turning it off removes the two cookies below.
| Name | What it is for | How long |
|---|---|---|
_ga | A random id that lets Google Analytics tell one visitor from another when it counts visits. It holds no name or email address. | Up to 2 years |
_ga_P92GX62QJB | Remembers where you are in a visit, so page views can be grouped into one visit. | Up to 2 years |
Stored by the website
| Local storage key | What it is for | How long |
|---|---|---|
3dt-analytics | Your answer, yes or no, to the analytics question. Not set until you answer. | Until you clear it |
3dt-theme | Light or dark theme, when you choose one. | Until you clear it |
3dt-active-org | Which of your teams you last worked in. | Until you clear it |
3dt-getting-started | That you closed the getting-started card. | Until you clear it |
Stored by the editor and viewer
The editor works in your own browser, so it keeps your work and settings there. Someone who opens a published link to look at it gets the viewer's program files cached and, if they change design options, the options they chose. No id is stored for them unless they leave a note or save a design.
| Key | What it is for | How long |
|---|---|---|
3dt.theme, 3dt.uiMode, 3dt.snap, 3dt.grid, 3dt.panel.*, 3dt.rail.*, 3dt.sections, 3dt.shortcuts, 3dt.outliner.sort, 3dt.gizmoSize | How you set up the editor: theme, panels, snapping, grid, shortcuts. | Until you clear it |
3dt.plugins.* | Which editor tools you switched on, and their settings. | Until you clear it |
3dt.library.thumb.v1.* | Pictures of library items, so they do not have to be drawn again. | Until you clear it |
3dt.config.<link>.<version> | The design options you last chose on a published link, so they are still there when you come back. | Until you clear it |
3dt.feedback.visitorToken | A random id, created only when you first leave a note or save a design on somebody's link, so you can see and delete your own notes later. It is not linked to an account. | Until you clear it |
3dt.proposals.signer | The name and email you typed when approving a design, so you do not have to type them again. Only set if you approve something. | Until you clear it |
3dt.autosave.session, 3dt.perf.fastpath.dismissed | Which editor tab this is, and that you dismissed a performance hint. Session storage. | Until the tab closes |
3dt.autosave.keptForSignIn | A note saying this tab put its unsaved scene aside while you went to sign in, so it can be put back when you come back. Session storage. | Until the tab closes, or until the scene is back |
Larger items
| Where | What it is for | How long |
|---|---|---|
3dt.autosave.* (IndexedDB) | Recovery copies of the scene you are editing, so a crash or closed tab does not lose your work. At most 3 copies and 96 MB. | Replaced as you work; clear to remove |
3dt.autosave.signin (IndexedDB) | The scene you were working on, put aside for as long as it takes you to sign in, because signing in leaves the page and would otherwise lose it. Only this tab can get it back. | Until it is put back; a later visit clears it if nobody came back for it |
3dt.recentFiles.v2 (IndexedDB) | The names of files you opened recently, and your browser's permission to reopen them. | Until you clear it |
Offline caches (Cache Storage) | The editor's and the free viewer's own program files, so they start quickly and work offline. Never your models. | Replaced when we update |
Files loaded from other websites
Apart from Google Analytics, if you agree to it, we do not put other companies' trackers on our pages. Some features do make your browser fetch a file from another website, and that website then sees your IP address and browser type, as with any web request:
| Website | When |
|---|---|
| Google (Sign in with Google) | Only if you choose to sign in with Google |
| Google (Google Analytics) | Only if you agree to analytics on our public pages |
| YouTube (youtube-nocookie.com) | Only when a model owner has placed a YouTube video in the scene |
| Addresses the model owner typed in | A logo, image, video or lighting file the owner linked from their own site loads from that site |
The payment page for Razorpay loads Razorpay's own checkout script when you choose to pay, and Stripe checkout opens on Stripe's site. Their cookies are covered by their own policies.
Clearing it
You can delete all of this at any time in your browser's settings for our website and the editor's address (look for "cookies and site data"). Deleting the sign-in cookie signs you out. Deleting the editor's storage removes its recovery copies, so save your work to a project or export it first.
More about what we do with information is in the privacy policy.