Last updated: April 19, 2026
This Cookie Policy describes the cookies and similar technologies (such as browser local storage) that Plotheus uses, what they are for, how long they last, and how you can control them. It should be read together with our Privacy Policy.
Cookies are small text files stored on your device by your browser when you visit a website. Similar technologies include browser local storage and session storage, which websites can use to save small pieces of information directly in your browser. Where the law treats these technologies the same as cookies (for example, under the EU ePrivacy Directive), we apply the same consent rules to them.
Plotheus uses cookies and local storage to authenticate users, maintain sessions, remember your cookie preference, and (only with your consent) measure product usage. We group them into three categories.
These are required for the platform to function (for example, to keep you signed in) and cannot be disabled. They are not used for analytics or advertising.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| sb-<project>-auth-token | Cookie (HttpOnly) | Supabase (sub-processor) | Stores your authenticated session so you stay signed in between requests. | Up to 1 year; refreshed on activity. |
| sb-<project>-auth-token-code-verifier | Cookie (short-lived) | Supabase (sub-processor) | Temporary PKCE verifier used during the Google Sign-In OAuth flow. | Deleted immediately after sign-in completes. |
These values are saved in your browser's local storage (not as HTTP cookies) and remain on your device until you clear them. They are strictly necessary to remember your choices on this website.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| plotheus_cookie_consent | Local storage | Plotheus (first-party) | Remembers whether you accepted or declined analytics. | Persists until you clear browser storage. |
These help us understand how visitors use Plotheus so we can improve the product. They are only set if you click "Accept all" in the cookie banner. If you choose "Essential only", no analytics identifier is created.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| ph_<project>_posthog | Local storage | PostHog (sub-processor, US) | Stores an anonymous analytics identifier (distinct_id) and session state used to group pageviews and product events. | Up to 12 months; removed on logout or when you decline analytics. |
| Associated PostHog events | Network requests to us.i.posthog.com | PostHog (sub-processor, US) | Transmit pageviews, page leaves, and specific in-app events (such as story creation) together with the distinct_id, IP-derived approximate location, and basic device metadata. We do not enable autocapture of form or click data. | Retained in PostHog for up to 12 months; see our Privacy Policy for retention details. |
In addition to the providers listed above, we use the following third-party services that may process your IP address or set cookies in your browser:
We do not use advertising cookies, advertising identifiers, or cross-site tracking, and we do not share data with advertising networks.
When you first visit Plotheus, a consent banner lets you choose between "Accept all" (which enables analytics) and "Essential only" (which disables analytics). You can change your choice at any time by:
Blocking strictly necessary cookies will prevent the platform from functioning correctly, including signing you out.
Under the GDPR, the UK GDPR, and the ePrivacy Directive (or equivalent local rules), you have the right to:
We may update this Cookie Policy from time to time. Changes will be reflected by an updated "Last updated" date at the top of this page, and material changes will be announced in the application.
If you have questions about our use of cookies or similar technologies, contact us at privacy@plotheus.com.