Cookie Policy
This Cookie Policy explains how PostPlan.io (operated by PostPlan Technologies Inc.) uses cookies, local storage, and similar technologies when you visit or log into our SaaS platform. We adhere to the EU ePrivacy Directive (Directive 2002/58/EC as amended), the German Telecommunications-Telemedia Data Protection Act (TDDDG § 25), the UK Privacy and Electronic Communications Regulations (PECR), and California CCPA/CPRA regulations.
Want to change your cookie settings?
You can review or adjust your preferences at any time with one click.
1. What Are Cookies & Similar Storage?
Cookies are small data files placed on your computer or mobile device when you visit a website. They are widely used to maintain secure user sessions, authenticate credentials, remember user interface preferences, prevent fraudulent attacks, and provide anonymized performance diagnostics.
2. Categories of Cookies We Use
A. Strictly Necessary Cookies (Required)
Always ActiveThese cookies and tokens are essential for you to navigate PostPlan.io, authenticate your account, maintain secure session state, and prevent Cross-Site Request Forgery (CSRF). Under GDPR Article 6(1)(f) and ePrivacy Article 5(3), these cookies do not require prior consent because the platform cannot function securely without them.
B. Functional & Preference Cookies (Optional)
User ChoiceThese storage keys allow PostPlan.io to remember choices you make (such as active brand selection, dark/light theme preferences, or collapsed sidebar status) to deliver a consistent, personalized experience.
C. Performance & Analytics Cookies (Optional)
Opt-In ConsentThese keys collect aggregated, privacy-safe, anonymized usage telemetry to detect API latency, resolve client-side errors, and enhance load times. PostPlan.io never uses cross-site tracking cookies, never sells browsing data, and never uses behavioral ad-retargeting beacons.
3. Specific Cookies & Storage Deployed
| Cookie / Storage Key | Category | Purpose & Description | Duration |
|---|---|---|---|
| next-auth.session-token | Strictly Necessary | Maintains encrypted user authentication session | 30 Days |
| __Secure-next-auth.session-token | Strictly Necessary | HTTPS-only secure session cookie in production | 30 Days |
| next-auth.csrf-token | Strictly Necessary | Protects against Cross-Site Request Forgery (CSRF) | Session |
| postplan_cookie_consent_v1 | Strictly Necessary | Stores your explicit GDPR/ePrivacy cookie preferences | 1 Year |
| __stripe_mid / __stripe_sid | Security & Fraud | Stripe payment fraud detection & 3D Secure verification | 1 Year / 30 Min |
4. Controlling Cookies in Your Browser
In addition to our on-site cookie consent manager, you can control, block, or delete cookies directly in your browser settings:
Google Chrome & Brave
Settings > Privacy and security > Third-party cookies > Block third-party cookies
Mozilla Firefox
Settings > Privacy & Security > Enhanced Tracking Protection > Strict / Custom
Apple Safari (macOS & iOS)
Preferences > Privacy > Prevent cross-site tracking & Block all cookies
Microsoft Edge
Settings > Cookies and site permissions > Manage and delete cookies