Cookie and storage notice
Last updated October 12, 2026
Plazas sets no advertising cookies and no analytics cookies. It keeps a few small items in your browser's own storage so that you stay signed in and the app remembers your choices. This page lists all of them.
1. Cookies and browser storage
A cookie is a small file a website saves in your browser and gets back with each request. Browser storage ("local storage" and "session storage") is similar, but stays in the browser: the site's own code reads it, and it is not sent along with every request. Plazas itself uses browser storage rather than cookies.
2. What plazas.ai keeps in your browser
| Name | What it is for | How long |
|---|---|---|
| sb-…-auth-token | Keeps you signed in. Set by our sign-in service (Supabase) when you log in. Needed for the app to work. | Until you log out; renewed while you use the app |
| plazas.lang | The language you chose. | Until you clear it |
| plazas.ui.live-view | Whether you last looked at the picture or the 3D view. | Until you clear it |
| plazas.ui.activity-open | Whether the activity panel was open. | Until you clear it |
| plazas.ui.teamView | How you last viewed the team page. | Until you clear it |
| plazas.draft.<account id> | A plaza you started creating and have not finished, so a reload does not lose it. | Until you finish or discard it |
| plazas.github.state | A one-time value that checks the GitHub sign-in you started is the one that comes back. | Removed when the sign-in completes |
| plazas.apps.state | Which app connection you started, so it can be confirmed when you come back. | Removed when the connection completes |
All of these are either needed for something you asked for (signing in, connecting an app) or remember a choice you made. None follows you across other websites.
3. The website assistant, on a business's own website
A business can put the Plazas assistant on its website. When a visitor opens that chat, the window keeps these in the visitor's browser, under the address of that business's website:
| Name | What it is for | How long |
|---|---|---|
| plazas-assistant-visitor | A random id, so the conversation and the daily limits hold together. It is not your name and is not linked to an account. | Until you clear it |
| plazas-assistant-<key> (local storage) | The id of your current conversation with that business. | Until the conversation ends or you clear it |
| plazas-assistant-<key> (session storage) | The last messages, so the chat is still there on the next page of the site. | Until you close the tab |
See the notice for visitors.
4. Other companies
- Fonts. The typefaces are loaded from Google Fonts. Your browser asks Google's servers for them, so Google sees your internet address and browser details. Google Fonts sets no cookie for this.
- Hosting. Our hosting network (Cloudflare) may set a strictly necessary security cookie to tell people from automated traffic.
- Payments. When you pay, the payment page belongs to [PAYMENT PROVIDER], which may set its own cookies needed to take the payment and prevent fraud.
- Connecting an app. When you sign in to an outside app, that sign-in page belongs to the app or to our connection provider and uses its own cookies.
5. What we do not use
No analytics tools, no advertising or retargeting pixels, no social-media trackers, no fingerprinting for marketing. Because nothing here needs consent under the rules we know of, there is no cookie banner. If we ever add something that does, we will ask first and update this page.
6. Your control
You can clear a site's storage in your browser settings at any time. If you clear the sign-in item you are logged out; if you clear the others the app goes back to its defaults. Blocking storage entirely will stop you signing in.
Questions: [PRIVACY CONTACT EMAIL].