Legal
Cookie Policy
Effective and last updated: 24 August 2026 · privacy update
PlayablePlan currently uses only storage that is strictly necessary to authenticate users, protect forms and preserve an unfinished task draft. We do not use advertising, profiling or third-party analytics cookies.
1. Storage in use
| Name | Type | Purpose | Duration |
|---|---|---|---|
isp_session | First-party HttpOnly cookie | Keeps an authenticated session and prevents client-side scripts from reading the credential. | Browser session; the server rejects it no later than 12 hours after issue. |
isp_csrf | Local storage | Stores a random anti-CSRF token used to protect authenticated changes. | Until logout or manual browser-data deletion. |
task-draft:<project-id> | Session storage | Preserves an unfinished new-task form in the current browser tab. | Until the task is created, the draft is cleared or the tab session ends. |
2. Why there is no cookie banner
These tools support features explicitly requested by the user and are not used for advertising, profiling or cross-site tracking. They are therefore active without consent. Public-page traffic is counted only in daily aggregates without placing analytics cookies or storing visitor identifiers.
3. Browser controls
You can remove or block cookies and site storage in your browser settings. Blocking strictly necessary storage may prevent login, protected actions or draft preservation from working.
4. Future changes
When you choose Checkout or the billing portal, you leave PlayablePlan for a Stripe-hosted page where Stripe applies its own cookies and privacy notice. PlayablePlan does not place Stripe cookies on this site. If PlayablePlan later introduces non-essential analytics, advertising or similar tracking, those tools will remain disabled until the required choice is offered and this policy is updated.