PlutoCookie Policy
This policy explains how Pluto uses cookies and similar technologies when you use our service.
1. What Are Cookies
Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the site owners.
We use cookies that are strictly necessary for the operation of our service. We do not use cookies for advertising, marketing, or behavioural tracking purposes.
2. Cookies We Use
Below is a detailed list of cookies that Pluto uses:
Essential Cookies
These cookies are strictly necessary for the app to function. They cannot be switched off as the service would not work without them. Under EU and UK GDPR, essential cookies do not require consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Stores your authentication session so you remain signed in securely | Session |
| sb-*-auth-token-code-verifier | Supabase | PKCE verification for secure OAuth sign-in flows | Session |
| pluto_cookie_consent | Pluto | Records your cookie consent preference | 1 year |
Analytics Cookies
Pluto does not currently use any analytics or performance cookies. If we introduce analytics in the future (such as Google Analytics), we will update this policy and request your specific consent before activating them.
3. Data Stored via Our Service
In addition to cookies, Pluto stores the following data in our database (hosted on Supabase, with data encrypted at rest and in transit):
| Data Category | What We Store | Why |
|---|---|---|
| Account | Email address, hashed password | To authenticate you and manage your account |
| Profile | First name, last name, display name, notification preference | To personalise your experience |
| Child Information | Child's name, date of birth | To calculate developmental stage and match age-appropriate activities |
| Saved Activities | Which activities you have saved per child | To build your personal activity library |
| Notifications | System notification messages, read status | To keep you informed about your account |
All personal data is protected by Row Level Security (RLS) policies — you can only access your own data. Pluto does not sell, trade, or share your personal data with third parties.
4. Your Rights Under GDPR
Under the EU General Data Protection Regulation (GDPR) and the UK GDPR, you have the following rights:
Right of Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can update or correct your personal information at any time via your profile.
Right to Erasure
You can delete your account and all associated data at any time from your profile settings.
Right to Data Portability
You can request your data in a machine-readable format.
Right to Withdraw Consent
You can withdraw your cookie consent at any time using the button below.
5. Managing Cookies
You can manage cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored on your device
- Delete individual or all cookies
- Block cookies from specific or all websites
- Set preferences for first-party and third-party cookies
Please note: Blocking essential cookies will prevent you from signing in and using the Pluto app. The app requires authentication cookies to function.
6. Withdraw Your Consent
You can withdraw your cookie consent at any time by clicking the button below. This will clear your consent preference and the cookie banner will appear again on your next visit.
7. Changes to This Policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated via email or in-app notification.
8. Contact Us
If you have questions about our use of cookies or this policy, please contact us:
Pluto Privacy Team
Email: privacy@pluto.app
Response time: Within 30 days