Cookies

Sawplan uses a small number of cookies and similar browser storage technologies. We do not use advertising or cross-site tracking cookies.

What is a cookie?

A cookie is a small text file your browser stores when you visit a site. Local storage is a related browser feature that can hold larger amounts of data on your device. Both are used here only to make Sawplan work and to understand how it is used.

Two sites, separate cookies

The website (sawplan.work) and the app (app.sawplan.work) set their own cookies, scoped to their own host only. Signing in to the app does not set a cookie on the website, and website cookies never sign you in to the app.

Strictly necessary cookies

These are required for Sawplan to function. They cannot be switched off in our systems.

App: session and authentication

When you use the app, we set a session cookie (sawplan-session) so the server knows you are logged in on subsequent requests. It is HTTP-only and expires when you log out or after a period of inactivity.

App: remember me (optional)

If you select "Remember me" when logging in, we also set an encrypted, HTTP-only authentication cookie that lasts for 30 days. This lets you stay signed in after your normal session expires or you restart your browser. Logging out clears this cookie and revokes the remembered login. Only enable it on a device you trust.

App: CSRF protection

A cross-site request forgery token cookie (XSRF-TOKEN) helps prevent forged requests to our API. It is set when the application loads.

Website: contact form

Most website pages set no cookies. The contact page sets a session cookie and a CSRF token cookie, scoped to the website, to protect the form and show whether your message was sent.

Bot protection: Google reCAPTCHA

The log-in, registration, forgot-password and verification-email forms in the app, and the website contact form, are protected by Google reCAPTCHA when bot protection is turned on. Only while one of these forms is shown, your browser loads Google’s reCAPTCHA script, and Google may set its _GRECAPTCHA cookie to perform its risk analysis. We use it only to keep automated abuse out of these forms. Other pages do not load it. See our Privacy policy for what is shared.

Local storage

Guest calculator

If you use the calculator without an account, your current project may be stored in localStorage on your device so you do not lose work between visits. This is not a cookie but serves a similar purpose. Clearing site data in your browser removes it. Saving to an account moves the project to our servers instead.

First-party analytics

The website and the app each keep a random visitor identifier and session identifier in local storage so we can count visits and see which pages and links are used. They are never shared with other websites, and the two sites keep separate identifiers. See our Privacy policy for what is recorded.

Payments

If you buy Pro, the payment step is provided by Paddle, whose checkout pages are covered by Paddle’s own cookie and privacy policies.

What we do not use

• Third-party advertising cookies.
• Social media tracking pixels.
• Analytics cookies that follow you across other websites.

Managing cookies

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent you from signing in, saving projects, or sending the contact form. Blocking local storage will stop the guest calculator from remembering your work between sessions.

More information

For how we handle personal data, see our Privacy policy. Questions: hello@sawplan.work.