Cookies
Three cookies, all of them necessary
Why there is no cookie banner
Because there is nothing to ask you about. Plotwell sets no advertising cookies, no analytics cookies and no third-party trackers. The cookies below are strictly necessary to sign you in and keep you signed in, and those do not require consent under the ePrivacy rules or the GDPR.
If that ever changes, a banner will appear, it will default to declined, and this page will say what changed and when.
The cookies we set
| Name | What it does | Expires |
|---|---|---|
| plotwell.session-token | Signs you in. A signed token that identifies your session. httpOnly, so no script can read it | 30 days |
| authjs.callback-url | Remembers where to send you back to after signing in | Session |
| authjs.csrf-token | Protects the sign-in form against cross-site request forgery | Session |
Third parties
If you subscribe, Stripe hosts the checkout page on its own domain and sets its own cookies there, which are necessary for the payment and are covered by Stripe's cookie policy. No Stripe cookie is set on getplotwell.com unless you start a checkout.
If you sign in with Google, Google sets cookies on its own sign-in page. We receive only your name, email and profile picture.
Turning them off
Your browser can block or delete cookies, including ours. Blocking the session cookie means sign-in will not work, because there is no other way for the site to know it is still you between two page loads. The marketing pages will read perfectly well without any cookies set.
Questions go to privacy@getplotwell.com. The rest of what we collect is on the privacy page.