Cookie Policy

1. Scope

This policy describes the cookies and similar browser storage that PlanetJoi.com (the “Platform”) uses, and the purpose of each. It forms part of our Privacy Policy.

A cookie is a small file that a website stores in your browser. We also use your browser’s local storage and session storage for two preferences; for the purposes of this policy they behave in the same way and are listed below. Because every item listed here is strictly necessary for a service you have requested, or stores a preference you chose, the law of the European Union and the United Kingdom does not require your consent to it, and we do not display a consent banner.

2. The complete list

This is every cookie and every item of browser storage we set. It is not a representative sample. Cookie names may carry a browser-security prefix such as “__Host-” or “__Secure-”.

Authentication and security, strictly necessary:

• pl_at: your signed-in session. httpOnly, expires after 10 minutes, and is refreshed as you browse.
• pl_rt: the refresh token that renews your session, scoped to the authentication endpoints only. httpOnly, 30 days, and it rotates on each use so that a stolen copy ceases to work.
• pl_csrf: a cross-site request forgery token, which our own pages read to prove that a form submission originated with you. 30 days.
• pl_mfa: holds your place for 5 minutes between entering your password and entering a sign-in code, where you have turned on that protection. httpOnly.
• pl_trust: remembers for 30 days a browser you chose to trust, so that a sign-in code is not asked for again on it. httpOnly.

Preferences, necessary for the Platform to render as you chose:

• planet_locale: the language you chose. One year.
• planet_tz: your time zone, so timestamps are rendered consistently on the server and in the browser. One year.
• planet_age_ack: that you confirmed at the door that you are 18 or older. One year. Clearing it brings the confirmation back.
• A theme preference in local storage, so the page does not flash the wrong colours before it loads.
• A mute preference in session storage, so feed video does not un-mute itself as you scroll.

Third party, strictly necessary:

• The security check at registration is provided by Cloudflare Turnstile. It runs only on the registration page, processes your IP address and browser characteristics to distinguish people from automated programs, and may set a cookie under Cloudflare’s own name for that purpose, under Cloudflare’s privacy policy.

Two further cookies, pl_st and pl_smfa, are set only for members of our staff who sign in to the administration area, and never for Users.

That is the entire list.

3. What we do not use

We set no advertising cookies, no analytics cookies, no social-media pixels, no conversion tracking and no third-party trackers of any kind. We do not fingerprint your device, and we do not sell or share what you do here for advertising.

This is a deliberate decision, and it is why you are not presented with a consent banner listing dozens of vendors.

4. Managing cookies

You may clear or block cookies in your browser settings at any time. Because every cookie we set is strictly necessary or a rendering preference, blocking them does not remove advertising; it signs you out, discards your language and theme, and brings back the age confirmation.

Deleting planet_age_ack is the supported way to make the age confirmation appear again.

5. Contact

Questions about this policy: privacy@planetjoi.com