Plan AI — Cookie & Local Storage Policy
Effective date: `TO BE SUPPLIED: effective date` Applies to: the Plan AI web app and the marketing website.
DRAFT. Accurate as to the app's current behaviour, which was verified against the source. Re-verify before publication if any tag, embed, or analytics tool has since been added — that would change the consent requirements in §5.
1. Summary
Plan AI sets no advertising cookies, no tracking cookies, and no analytics cookies. There is no analytics SDK active in the app: getAnalytics() is never called anywhere in the codebase.
What the app does use is local storage on your own device, to remember your settings and to let the app work offline. Local storage is not a cookie — it is not sent to our servers with each request — but it is covered here because it serves a similar purpose and the law treats the two together.
2. What the app stores on your device
2.1 Strictly necessary — small settings
Set by Plan AI itself. Persists until you clear the app's data.
| Key | What it holds | Why |
|---|---|---|
app_language | EN or TR | Remembers your language between visits |
subscriptionTier | free, pro, or ultra | Lets the app show the right features without waiting for the network |
subscriptionTier_sig | An integrity check on the above | Detects local tampering with the cached tier |
weekly_templates | Weekly plan templates you saved | So your templates survive a reload |
None of these contains an account identifier, an email address, or any tracking identifier.
2.2 Strictly necessary — the offline database
The app stores your planner data in your browser's IndexedDB so it works without a connection. This holds your tasks and routines, and the whole reward system (points, prizes, spin history, and the parent PIN).
The reward data and the parent PIN are only on your device — they are never uploaded to us. The parent PIN is stored unencrypted; see Children's Privacy Notice §8.
2.3 Strictly necessary — the service worker cache
A service worker caches the app's own files (code, styles, icons) so it loads quickly and works offline. It caches program files, not your personal data.
2.4 Authentication
Google Firebase Authentication stores your sign-in session on your device so you are not asked to sign in on every visit. This is strictly necessary to keep you signed in. It is set by Google as our processor.
2.5 Payments
If you start a checkout you are taken to Stripe or iyzico, who set their own cookies on their own pages under their own policies, principally for fraud prevention. We do not embed their scripts in the app.
- Stripe: https://stripe.com/privacy
- iyzico: `TO BE SUPPLIED: current iyzico privacy/cookie policy URL
2.6 Error reporting — only if enabled
If error reporting is switched on, Sentry may store a small identifier to group related error reports. It is not currently enabled — no DSN is configured — so nothing is set today. See COMPLIANCE-GAPS.md §8.
3. What we do NOT set
- No advertising or retargeting cookies.
- No third-party analytics (no Google Analytics, no Firebase Analytics, no others).
- No social-media pixels or share widgets.
- No cross-site or cross-app tracking identifiers.
- No fingerprinting.
This is a deliberate product decision: the app is for children, and we do not consider behavioural tracking of children acceptable at any scale.
4. Managing it
- Clear everything: your browser's "clear site data" for the Plan AI domain, or
uninstalling the app, removes all of the above.
- Block it: you can block local storage in your browser, but the app will not
work — it needs local storage to hold your planner and to keep you signed in.
- Warning: clearing this data deletes device-only data permanently, including
all reward points, the prize list, and saved weekly templates. We hold no copy and cannot restore it.
5. Consent
Everything in §2 is strictly necessary for a service you have asked for, so under the EU ePrivacy Directive and Turkish law it requires clear disclosure — this document — but not prior consent.
If any non-essential cookie or tag is ever added (analytics, advertising, a social embed, an A/B testing tool), a compliant prior-consent banner becomes mandatory: granular, refusable, with "reject" as easy as "accept", and no non-essential storage set before a choice is made.
TO BE SUPPLIED: the marketing website at "plan ai web/" currently has no consent mechanism. It does not need one while it uses no non-essential storage — confirm that is still true at launch, and add a banner before adding any tag. COMPLIANCE-GAPS.md §10.
6. Changes
Material changes will be reflected here with an updated date. Adding any non-essential storage will be accompanied by a consent mechanism, not just a policy edit.
7. Contact
TO BE SUPPLIED: privacy contact email address