1.The short version
We use browser storage for two things: keeping you signed in, and keeping your working draft from vanishing on refresh. Both are strictly necessary and exempt from consent under the laws that regulate this. Nothing else is set unless you allow it, and we run no advertising or cross-site tracking at all.
Most of what we use is local storage rather than cookies. The law treats them the same way, so we disclose both here.
2.Strictly necessary storage
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
| Authentication session | Local storage / cookie | Keeps you signed in and refreshes your session securely | Until sign-out or expiry |
| thinking-plans:draft | Local storage | Holds the plan you are currently building so a refresh or crash does not lose it | Until you clear it or start a new plan |
| thinking-plans:library:v1 | Local storage | Your saved plans on this device; the offline cache of your cloud library when signed in | Until deleted or you clear site data |
| thinking-plans:profiles:v1 | Local storage | Your saved business profiles on this device | Until deleted or you clear site data |
| thinking-plans:consent:v1 | Local storage | Remembers your answer to the storage banner so we stop asking | 12 months |
These cannot be switched off in the product because the product does not function without them. You can still remove them by clearing site data in your browser, or by using the clear-this-browser control on your account page — both will sign you out and remove any locally-held drafts.
3.Optional storage
Optional storage covers aggregate product measurement: which features are used, where generation fails, how long a build takes. It is off until you choose 'Allow optional' in the banner, is never used for advertising or profiling, and is never shared with advertising networks or data brokers.
Declining costs you nothing — no feature is withheld, no nag repeats, and the Service behaves identically.
4.Third-party storage
- Signing in with Google sets storage under Google's own domain during the sign-in exchange, governed by Google's policies rather than ours.
- Web fonts are requested from a font host when a page loads; this involves a network request but sets no tracking storage in our context.
- We embed no advertising pixels, social widgets, session recorders or heat-mapping tools.
5.Changing your mind
- Use the 'Cookie settings' link in the footer to reopen the banner and change your answer at any time.
- Withdrawing consent is exactly as easy as giving it, and takes effect immediately.
- Your browser's privacy settings can block or clear storage entirely; sign-in and saved drafts will stop working if you do.
- We honour Global Privacy Control signals as an opt-out of optional storage where your browser sends one.
6.Changes
If we add a new category of storage, we re-ask rather than assume: the consent record is versioned, and a new version reopens the banner.