Every cookie and piece of browser storage Pluff uses, what it's for, and how long it lasts.
Pluff uses only what it needs to work: keeping you signed in, remembering what you bought, keeping payments safe and remembering your settings. We don't use advertising cookies, cross-site tracking or analytics, and we don't sell or share browsing data. Apart from one referral cookie that's set only if you open a Pluff partner's referral link, everything below is strictly necessary for a service you asked for, so it doesn't need a consent pop-up — and you can clear or block any of it in your browser at any time.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| pluff_buyer | Pluff | Remembers what you bought or joined in this browser so your purchase stays open. It is signed, so it can't be edited to open anyone else's purchases. | 1 year |
| pluff_notice | Pluff | Remembers that you've seen the cookie notice, so it doesn't show again. Holds no personal information. | 1 year |
| pluff_ref | Pluff | Set only when you open a Pluff affiliate partner's referral link (pluff.social/r/…). Holds just that partner's code, so if you create a Pluff account in this browser the partner is credited. Never used for ads or shared. | 60 days |
| pluff_aff | Pluff | Keeps a Pluff affiliate partner signed in to their affiliate dashboard in this browser. Signed, so it can't be edited. | 1 year |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention while you pay. Set only when a payment form is shown. | 1 year / 30 minutes |
| __cf_bm | Cloudflare (our network provider) | Tells real visitors apart from bots to protect the site from abuse. | 30 minutes |
| __dpl | Lovable (our hosting provider) | Keeps you on the same version of the site while you browse, so pages don't break during an update. | Session |
Some things are saved in your browser's local or session storage instead of cookies. They stay on your device and are not sent to us with every request.
| What | Purpose | Duration |
|---|---|---|
| Sign-in session (sb-…-auth-token) | Keeps creators signed in to their workspace. | Until you log out |
| Light or dark mode | Remembers the look you picked — in the workspace, and on a challenge or course page (pluff.page-mode). | Until you change it or clear site data |
| Group post starter (pluff-pg-compose) | When you tap “Share your win” or “Introduce yourself” in a challenge or course, carries the words your post starts with to the group's composer. | Until you open the composer or close the tab |
| Workspace preferences | Sidebar open or closed, walkthroughs already seen, your last AI chat, unsent drafts, dismissed tips. | Until you clear site data |
| Checkout and sign-up progress | Carries your name, email or product idea from one step to the next. | Until you close the tab |
| Keyword link (pluff-kw) | When you arrive from a creator's keyword link (pluff.social/@name/word), remembers that word in this tab so the creator can see a purchase or sign-up came from it. Holds only the word, the creator and the time. | 30 minutes, or until you close the tab |
| Return to connect an app (pluff-after-login) | When an AI app sends you to Pluff to connect and you need to sign in first, remembers to bring you back to that app's request afterwards. | Until you sign in (at most 30 minutes) or close the tab |
| Interactive product tools | Your progress in a product you bought — steps, worksheet, tracker and quiz answers — so it loads instantly (also saved to your purchase). | Until you clear site data |
| Accounts on this device (pluff-accounts) | The name, email, photo and sign-in method (Google or email) of up to 5 creator accounts signed in here, for the “Welcome back” picker on the login page. Never your password. Remove them there with “Remove accounts”. | Until you remove them or clear site data |
| AI builder layout (pluff-builder-chat, pluff-builder-targets) | On computers, how wide you made the chat beside Pluff Assistant's live preview, and which preview (your page or a guide) each of your recent chats showed, so a chat opens in the same layout. Only a number and ids. | Until you clear site data |
| Product edit count (pluff-product-edits) | A small number counting your saved product edits on this device, so Pluff asks how editing feels once — after a few edits, not on the first. | Until you clear site data |
| Day notes and saved days (pluff-note:…, pluff-bm:…) | A member's own notes on each day and the days they saved in a challenge or course. They never leave this device; the journal PDF is made from them on the device. | Until you delete them or clear site data |
| Reading settings (pluff-reading) | A member's text size, easier-reading and high-contrast choices in a challenge or course, on this device. | Until you change them or clear site data |
| Lesson checklists (pluff-lc:…) | Which lines of a lesson's checklist a member ticked on this device, so they stay ticked when the lesson is opened again. Only the line numbers. | Until you clear site data |
| Last community screens (gl-snap:…) | The last screen of up to 6 communities, challenges or courses opened on this device — the header, the first posts, Today and the message list (not the messages inside a chat) — so they open at once next time while the newest version loads. Only for the person who opened them; cleared when they log out or sign out. | Up to 14 days, or until you log out or clear site data |
| Members counted in (pluff-room-seen:…) | For a community's owner: how many members they'd counted in on that community's orb in Workspace → Community, so new members since their last visit can be counted in. A number only, per community. | Until you clear site data |
| Launch question timing (pluff-ask-launch) | When your page first went live on this device, so Pluff asks how launching went on your next visit — not while you're copying your link. | Until that question is asked, or you clear site data |
| Investor demo (pluff-demo) | Only after entering pluff.social/demo with a code: which account is the shared demo, so logging out of it doesn't add it to this device's Welcome back list. | Until you log out, or clear site data |
| Communities on this device (pluff-cm-welcome:…, pluff-cm-level:…, pluff-cm-start:…, pluff-cm-hi:…) | Whether you've seen a community's welcome, the last level it celebrated, which Start here steps you've done and when the new-members card last showed — so each shows once. | Until you clear site data |
| Saved posts (pluff-saved-…) | Posts you saved in a group or community. They stay on this device only. | Until you remove them or clear site data |
| Move invite (pluff-mv-…) | When you open a Creator's invite to their moved community, the invite's link, so Keep my spot still works when you come back on this device. | Until you clear site data |
| Cookie notice | Remembers that you've seen this notice. | Until you clear site data |
Payments are handled by Stripe (stripe.com/privacy). Creators can add music players from Spotify, Apple Music or SoundCloud to their page; those players load only on pages that show them and follow their own cookie policies. Videos a Creator shares from TikTok, Instagram or YouTube ("Shop the video") show a cover image first; the platform's own player — and any cookies it sets under its own policy — loads only when a visitor taps play. A Substack subscribe form a Creator adds loads from Substack — and any cookies Substack sets under its own policy — only when a visitor taps Subscribe; the posts shown before that are text and images Pluff keeps with the page. A full video a Creator sells or gives away on their page loads only once the visitor has unlocked it; an uploaded one streams from Pluff's storage, a YouTube (privacy-enhanced mode), Vimeo, Loom, Wistia or Google Drive one plays in that provider's player under its own cookie policy. Fonts are served by Google Fonts, which receives your IP address to deliver the font file but sets no cookies. Photos may be delivered by Pexels.
You can delete or block cookies and site data in your browser settings. Blocking them may sign you out, forget what you bought in that browser (your purchase email can reopen it), or stop payments from working. Pluff honors the Global Privacy Control signal; since we don't sell or share personal information for advertising, there is nothing further to opt out of. Creators can also clear this device's saved preferences in Settings → Data controls.
If Pluff ever adds analytics or advertising cookies, we'll update this page and ask for your consent first where the law requires it. Questions: hello@pluff.social.
Questions about this document? Visit our support page.