In short
We use a handful of first-party cookies and browser storage entries to sign you in, keep your account secure and remember a few settings. We don't use advertising cookies, our page-view analytics and page-speed measurement (Vercel Web Analytics and Speed Insights) work without cookies, and nothing on our site tracks you across other websites.
What cookies are
A cookie is a small text file a website stores in your browser. Local storage is a similar feature that keeps data in your browser but isn't sent to the server with each request. This policy covers both, and we call them “cookies” for short. All of ours are first-party: they are set by our own domain and only our own site can read them.
On our website
These apply to anyone visiting our public website, including the demo store.
plain_consent- Purpose
- Remembers the cookie choices you make on our site, so we don't ask again on every page. Stored as a cookie and mirrored in local storage.
- Type
- Essential
- Duration
- 180 days, or until you change your choice
pt-announcement-dpdp-2027- Purpose
- Remembers that you closed the announcement bar at the top of the page. Local storage only, never sent to us.
- Type
- Functional
- Duration
- Until you clear your browser storage
In the dashboard
These are set only when you sign in to your Plain Theory account.
pt_session- Purpose
- Keeps you signed in. Holds a signed reference to your session, not your password. Not readable by scripts on the page.
- Type
- Essential
- Duration
- 30 minutes of inactivity, renewed while you use the dashboard, and never more than 12 hours
pt_mfa- Purpose
- Proves you passed the password step while you enter your multi-factor authentication code. Not readable by scripts on the page.
- Type
- Essential
- Duration
- 5 minutes, and removed once you finish signing in
pt-sidebar- Purpose
- Remembers whether you collapsed the dashboard sidebar.
- Type
- Functional
- Duration
- 1 year
Essential cookies are needed for the service to work and to keep your account secure, so they don't need your consent. Functional entries only remember a display preference and contain no personal data.
What we don't use
- no advertising or retargeting cookies, and no social media pixels;
- no analytics cookies: Vercel Web Analytics counts page views and Vercel Speed Insights measures page speed, both without cookies or identifiers, and we use no session recording;
- no cookies that track you across other websites;
- no third-party cookies of any kind.
If we ever add a non-essential cookie, we'll list it here first and ask for your consent before setting it.
Your choices
- Cookie settings. Use Cookie settings in the footer of any page to review or change your choices at any time. Withdrawing consent is as easy as giving it.
- Global Privacy Control. If your browser sends a Global Privacy Control signal, we honor it as an opt-out of any sale or sharing of your data, and of marketing cookies, without you having to do anything else.
- Your browser. You can block or delete cookies and local storage in your browser's settings. If you block essential cookies, you won't be able to sign in to the dashboard.
On our customers' sites
Websites that use Plain Theory set the plain_consent cookie and local storage entry on their own domain to remember the choice you made in their banner. That website, not us, decides which cookies it uses and for how long it remembers your choice, and its own cookie policy explains them. To change your choice there, use the privacy choices link on that website.
Changes and contact
We update this policy whenever the cookies we use change, and the date at the top shows when it last changed. For more on how we handle personal data, read our privacy notice. Questions go to privacy@theplaintheory.in.