Cookie Policy
Last updated: 10 October 2026
This policy lists every cookie and browser-storage entry the Newplans website uses: which ones are essential, and which run only if you allow them.
What cookies are
Cookies are small files a website stores in your browser. Local and session storage are similar browser features. We use both for the reasons below, and list each one by name.
The iOS and Android apps don't use browser cookies: they keep your sign-in in the device's secure storage, and you control app analytics in Settings → Privacy & data.
Essential
Always on. These are needed for signing in, security and remembering your cookie choice, so they don't need consent.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| __Secure-authjs.session-tokencookie | Newplans | Keeps you signed in (an encrypted session). Long sessions may be split into .0, .1 parts. Named authjs.session-token on non-HTTPS development servers. | 30 days, renewed while you use Newplans |
| __Host-authjs.csrf-tokencookie | Newplans | Protects sign-in and sign-out forms against cross-site request forgery. | Session (until the browser closes) |
| __Secure-authjs.callback-urlcookie | Newplans | Remembers the page to return to after signing in. | Session |
| __Secure-authjs.pkce.code_verifier, __Secure-authjs.state, __Secure-authjs.noncecookie | Newplans | Secure the hand-off when you sign in with Google or Apple. | 15 minutes |
| activeWorkspaceIdcookie | Newplans | Remembers which of your workspaces is open. | 12 months |
| np_consentcookie | Newplans | Stores your cookie choice (analytics allowed or not), so we don't ask on every page. | 6 months |
| spyglass_oauth_verifier, spyglass_oauth_statecookie | Newplans | Secure the connection step when an administrator connects a data integration. | 10 minutes |
Preferences
Stored only in your browser, never sent to us or anyone else, and used only for the display choices you make.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| newplans-themelocal storage | Newplans | Your light or dark theme. | Until you clear it |
| newplans.sidebar.*, newplans.assistant.*, cintel:*, and similar newplans.* keyslocal storage | Newplans | Layout choices in the app, such as a collapsed sidebar or panel, and whether you have seen an introduction. | Until you clear it |
| Short-lived session keys (for example the product tour and an image hand-off in Creative Lab)session storage | Newplans | Carry a step from one page to the next. | Until the tab closes |
Analytics (only with your consent)
None of these load, run or set anything until you choose “Accept all”, or allow Analytics under “Customize”. If you reject or later withdraw consent, they stay off and we delete the cookies they set.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id>cookie | Google Analytics | Counts visits and how the website is used, with a random identifier. | Up to 2 years |
| _cs_id, _cs_s, _cs_c and other _cs_* cookiescookie | Contentsquare | Measures how pages are used (scrolling, clicks) and, where enabled, records sessions with everything you type and everything on screen masked. | From 30 minutes up to 13 months |
| ph_<project>_posthogcookie | PostHog | Product analytics on the website: which features are used, identified by an internal account ID, never your email. Also kept in local storage. | Up to 12 months |
| np_attribcookie | Newplans | Remembers the campaign (UTM tags), landing page and referring site of your first visit, so a sign-up can be credited to it. No personal data. | 90 days |
Support chat (only when you open it)
The chat loads only when you click “Chat with us” on the Support page, and its cookies are set then, to run the conversation you started.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| intercom-id-<app>, intercom-session-<app>, intercom-device-id-<app>cookie | Intercom | Keep your support conversation open across pages and visits. | Up to 9 months (the session cookie: 1 week) |
Your choices
When you first visit, the cookie banner offers “Accept all”, “Reject all” and “Customize”. You can change your choice at any time with (also in the footer of every page). Rejecting or withdrawing consent stops the analytics tools and deletes their cookies; essential cookies stay, because the site cannot work without them.
You can also block or delete cookies in your browser settings. Blocking essential cookies will stop sign-in from working.
More information
How we handle personal information, including what the analytics tools receive, is explained in the Privacy Policy. Questions: see Support.