Legal

Cookie Policy

Last updated: 15 October 2026

This page lists every cookie and every piece of browser storage PlanWatch uses, what each one is for and how long it lasts. It also explains the anonymous visit counting we do without asking, and how to stop it. For everything else we do with personal data, see our Privacy Policy.

When you first visit, a banner offers three equal choices: Essential only, Manage and Accept all. Nothing optional is switched on, and nothing is pre-ticked, until you choose it.

tune

Your choices on this browser

Change or withdraw your cookie choice at any time. Withdrawing takes effect straight away: we delete the identifiers we set, expire the analytics and advertising cookies we can reach, and reload the page so those scripts stop.

Your visits are counted anonymously. You can stop that at any time.

lock

1. Essential (always on)

These are strictly necessary to provide a service you ask for, so they do not need consent. Several are only set when you use the feature they belong to.

Name Purpose Lasts
pw_consentCookie. Remembers your cookie choice so we don't ask on every page, and lets our server respect it (for example, not sending sign-up events to Meta unless you accepted marketing).6 months
planwatch_login_tokenCookie. Keeps you signed in after you use an email sign-in link.Up to 30 minutes
planwatch_trade_tokenCookie. Keeps you signed in to the business (Demand Radar) area.30 minutes, renewed while you use it
pw_oauth_stateCookie. Protects "Sign in with Google" against forged requests.Minutes, for the sign-in only
pw_brain_sid, pw_brain_knownCookies. Only if you use the planning advisor chat: keep your conversation together and remember that you have given an email there.1 year
pw_audienceBrowser storage. Remembers whether you chose the homeowner or business view.Until you clear it
pw_stats_optoutBrowser storage. Only if you choose "Don't count my visits": remembers that objection.Until you clear it or undo it
StripeStripe's own cookies on its checkout pages, for payment security and fraud prevention. See Stripe's cookie policy.Set by Stripe
CloudflareOur site is delivered through Cloudflare, which may set a security cookie (such as __cf_bm) if it needs to check that traffic is not automated.Up to 30 minutes
bar_chart

2. Anonymous visit statistics (on unless you object)

If you have not accepted analytics cookies, including if you chose Essential only, we still count visits for our own statistics. UK law allows this without consent when it is only used to improve our own site and you are told about it and can object easily (the Privacy and Electronic Communications Regulations, regulation 6 and Schedule A1, statistical purposes, as amended by the Data (Use and Access) Act 2025).

What we record for each page you view in this tier:

  • the page and its title, and the address of the site that sent you (without any query string);
  • the kind of source (search engine, AI assistant, social site, direct), and any campaign name in the link;
  • clicks on buttons and links, form submissions (never what you typed), scroll depth and time-on-page markers;
  • your screen size, your browser's user-agent string and a one-way scrambled (hashed) form of your IP address, used to tell visitors apart in our totals and to spot automated traffic (we never store the IP address itself);
  • a random visit id, pw_stats_session, kept in your browser's session storage. It is deleted when you close the tab, so we cannot link one visit to the next.

In this tier there is no persistent visitor id and no advertising click id (such as fbclid or gclid). Our server removes them even if a browser sends them. Nothing is sent to Google, Microsoft, Meta or anyone else, and none of it is used for advertising. A session-storage note of where this visit came from (pw_source) keeps later pages of the same visit attributed correctly; it is also deleted when you close the tab. Visit records are deleted after 90 days.

One link we do make: if, during the same visit, you look at our pages for trade businesses and then sign up or start a checkout, we note on that sign-up that it came from a business visit, so our team can offer the right help. The visit id itself is not stored with your account, and we forget the visit after 24 hours.

How to object

Any one of these stops the counting: use the Don't count my visits control above (also in Cookie settings); or turn on Global Privacy Control or Do Not Track in your browser (we honour both, and our server ignores visit counts from browsers that send them). Accepting analytics replaces this tier with the analytics tier below.

insights

3. Analytics (only if you accept)

With analytics accepted, our own visit records also carry a visitor id kept on this browser, so we can see how people come back and which visits lead to a sign-up. We also load Google Analytics 4 and Microsoft Clarity (Clarity records how pages are used, such as clicks, scrolling and mouse movement, with form fields masked).

Name Set by / purpose Lasts
pw_visitor_idPlanWatch, browser storage. Random visitor id sent with our own visit records.Until you clear it or withdraw consent
pw_session_idPlanWatch, session storage. Groups the pages of one visit.Until you close the tab
_ga, _ga_*Google Analytics 4. Distinguishes visitors and sessions.Up to 2 years
_clck, _clsk, CLID, MUIDMicrosoft Clarity. Links page views into a session and a returning user.1 day to 1 year
campaign

4. Marketing (only if you accept)

With marketing accepted, we load the Meta (Facebook and Instagram) pixel and tell Meta when someone views a page, signs up or starts a paid plan, so we can measure our adverts. Our server also sends those events to Meta through its Conversions API, with your email address and postcode hashed, your IP address and browser user agent, and the Meta ids below. If you arrive from a Meta advert, we keep its click id (fbclid). None of this happens unless you accept marketing; a choice you make at checkout also decides whether the later trial and payment events are sent.

Name Set by / purpose Lasts
_fbpMeta pixel. Identifies this browser to Meta for advert measurement.90 days
_fbcPlanWatch / Meta. Stores the click id from a Meta advert link.90 days
update

Changes and contact

If we add or change a cookie, we update this page and the date at the top, and we ask again where the change needs your consent. Questions: hello@planwatch.co.uk.