Cookies

Last reviewed: June 2026

Cookies are small text files a website stores on your device. Here's exactly what HangPlan uses — no small print.

What we use

Essential — authentication

When you sign in, Supabase (our authentication provider) sets session cookies so you stay signed in as you navigate the app. These cookies contain a secure token, not your password. They expire when your session does or when you sign out.

Required
Set by
@supabase/ssr (HangPlan's own server, not a third-party script)
Consent needed
No — these are strictly necessary under PECR
Data stored
Encrypted session token only

Preference — cookie choice

If you make a cookie-consent choice (when/if analytics is ever added), we store that choice in localStorage so we don't ask you again. This is a preference cookie, not a tracker.

Required
Key
hangplan_cookie_consent (localStorage)
Consent needed
No — storing your own preference is strictly necessary

No analytics or tracking

HangPlan currently has no analytics or tracking cookies. We haven't configured Google Analytics, Meta Pixel, or any equivalent service. There are no non-essential cookies of any kind at this time.

If that ever changes — for example, if we add a cookieless analytics tool or decide to measure which features are useful — this page will be updated and a consent banner will appear before any new cookie is set.

Third-party services that may set cookies

Google Sign-in.If you choose “Sign in with Google”, Google's own OAuth flow may set cookies on google.com. These are outside our control and covered by Google's privacy policy.

Vercel. Our hosting provider may log request metadata at the edge. See Vercel's privacy policy.

How to control cookies

You can delete or block cookies at any time using your browser settings. Note that blocking essential cookies will prevent you from staying signed in.

You can also use the “Cookie preferences” link in the site footer to review your choice at any time.

Questions?

If you have questions about how we use cookies, contact us at [PLACEHOLDER: privacy contact email / DPO if applicable].

For independent guidance on cookies and your rights, visit the ICO (ico.org.uk).