1. What this Policy covers

This Cookie Policy explains how Timecampus Technologies Private Limited ("Timecampus", "we", "us") uses cookies, local storage, session storage, IndexedDB, pixels, web beacons and similar technologies (together, "cookies") on:

the PlanMagnet website at planmagnet.com (marketing pages, pricing, the waitlist sign-up, public docs, community);
the PlanMagnet product frontend at app.planmagnet.com;
the PlanMagnet mobile applications (where they store local state).

It supplements our Privacy Policy at https://planmagnet.com/privacy. Capitalised terms not defined here have the meaning given in the Privacy Policy.

2. What cookies are, and how we categorise them

A cookie is a small text file stored on your device by your browser. "Similar technologies" — local storage, session storage, IndexedDB, web beacons and pixels — work differently but raise the same privacy questions.

We use four categories:

Strictly necessary — required to operate the site or product (authentication, security, load balancing, CSRF, cookie-consent state). You cannot opt out of these and still use the Service.
Functional — remember your preferences (theme, language, layout, last-viewed tenant / workspace) so the product behaves the way you set it up.
Analytics / performance — measure how the site and product are used (via our self-hosted Rybbit instance) so we can fix bugs and prioritise improvements. We export this data for our own analysis and do not sell it.
Marketing — measure the effectiveness of marketing campaigns and waitlist sign-ups. We do not use cookies to share data with third-party advertising networks for cross-context behavioural advertising.

We do not use cookies or trackers to profile the people in your workspace — analytics measure how the software is used, not how to evaluate a person.

3. The cookies we set

Cookie / storage key	Set by	Category	Purpose	Duration
`cf_session`, `cf_csrf`	Timecampus (first-party)	Strictly necessary	Authenticated session and CSRF protection	Session / 14 days
`cf_consent`	Timecampus (first-party)	Strictly necessary	Records your cookie-consent choices	12 months
`cf_tenant`, `cf_locale`, `cf_theme`	Timecampus (first-party)	Functional	Last tenant / workspace, language, theme	12 months
LocalStorage: `cf_ui_state`	Timecampus (first-party)	Functional	Persists UI state (tabs, sidebar, scroll position)	Until cleared
`__cf_bm`, `cf_clearance`	Cloudflare	Strictly necessary	Bot management, WAF challenge state	Up to 30 days
Rybbit analytics identifiers	Rybbit (self-hosted by Timecampus — see §4)	Analytics	Aggregate, de-identified product and website analytics	Up to 13 months

The exact names above may evolve as the product develops; the categories and providers will not change without notice. We do not load third-party advertising cookies, retargeting pixels, social-network "share" pixels that load without consent, or fingerprinting beyond what Cloudflare uses for bot mitigation.

4. Rybbit — our product and website analytics

We use Rybbit (https://rybbit.com) as our analytics tool. We run a managed-cloud Rybbit subscription that we operate ourselves.

Events recorded include page views, feature usage, error counts, navigation within the product, and aggregate funnel data — keyed by an internal account / device identifier.
We may export Rybbit data for our own analysis and dashboarding. We do not sell analytics data or user-level behavioural profiles to any third party, and we do not share user-level analytics with advertising networks.
Where analytics processing involves cookies or similar storage on EEA / UK / Swiss visitors' devices, it requires consent — see §5.

5. How we ask for consent

EEA, UK and Switzerland. On your first visit we show a banner that lets you Accept all, Reject non-essential, or open preferences to consent category-by-category. Non-essential cookies are not set until you consent. You can change your choices at any time at https://planmagnet.com/cookie-preferences.
India. We rely on a layered notice — this Cookie Policy plus the banner — consistent with the Digital Personal Data Protection Act, 2023 as it applies to cookies and the IT Act, 2000 SPDI Rules.
California and other US states. We honour Global Privacy Control (GPC) signals as opt-out signals for "sale" or "sharing" to the extent state laws require. We do not sell personal information.
Rest of world. We apply the broader of any local requirement and the EEA standard above where lawful.

6. Controlling cookies

You can:

adjust your choices in our cookie preferences centre at https://planmagnet.com/cookie-preferences;
delete or block cookies through your browser settings (note that strictly necessary cookies cannot be disabled without breaking the Service);
use browser features like Private / Incognito mode, anti-tracking lists, or extensions;
transmit a Global Privacy Control signal — we honour it as a US opt-out signal.

Browser-level controls:

Chrome: https://support.google.com/chrome/answer/95647
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
Edge: https://support.microsoft.com/microsoft-edge

7. Do Not Track

There is no industry consensus on "Do Not Track" (DNT). We do not currently respond to DNT signals, but we honour Global Privacy Control as set out in §5.

8. Changes to this Policy

We may update this Cookie Policy from time to time. For material changes that introduce new tracking categories or providers, we will re-prompt EEA / UK / Swiss visitors for consent and notify account holders by email or in-product banner. The current version is always at https://planmagnet.com/cookies.

9. Contact

Questions about cookies and tracking: [email protected].

For Timecampus's full registered details and grievance officer, see the Privacy Policy §1 and §14.