Loading...
Loading...
Last Updated: 12 October 2026
Cookies are small pieces of text files that are stored on your device when you visit our website or use our app. They allow us to recognize you, remember your preferences, and understand how you use Pantri. Cookies can be either persistent (stored until you manually delete them) or session-based (deleted when you close your browser).
These are needed for Pantri to work at all: to sign you in, to keep you signed in, to stop someone else submitting a form as you, and to remember whether you turned analytics off. There is no version of the app that functions without them, so we do not ask first. None of them are used for advertising, and none of them are shared with anyone for their own purposes.
| Name | Kind | What it does | How long it lasts |
|---|---|---|---|
csrf-token | Cookie | A random anti-forgery token, so another website cannot make your browser submit something as you. It is HttpOnly, Secure and SameSite=Strict — meaning JavaScript cannot read it, it is only ever sent over HTTPS, and it is never sent from another site. | 24 hours |
sb-…-auth-token(may be split into numbered parts, e.g. .0 and .1, when it is too large for one cookie) | Cookie | Your sign-in session, set by Supabase. This is what keeps you logged in between visits. | Up to 400 days, or until you sign out — whichever is first. Signing out deletes it immediately. |
pantri_cookie_consent | Browser local storage | Whether you turned analytics off on this site, or what you answered on the cookie banner we used before 12 October 2026. Without it, analytics would come back on at your next visit. | Until you clear this site’s data in your browser |
pantri-theme | Browser local storage | Whether you chose light or dark mode. | Until you clear your browser’s site data |
pantri:coach | Browser local storage | Which one-off tips you have already been shown, so you are not shown them twice. | Until you clear your browser’s site data |
pantri.recipes.sort.v2 | Browser local storage | The sort order you last chose on your recipe list. | Until you clear your browser’s site data |
pwa-install-dismissed | Browser local storage | That you dismissed the “install Pantri on your device” prompt, so we stop offering it. | Until you clear your browser’s site data |
On a first visit to app.pantri.app while signed out, the only cookie set is csrf-token. The rest of the essential list is browser storage, and each entry is only written once you do the thing it remembers. Visiting pantri.app while signed out sets no cookie at all.
Everything in this section runs unless you turn analytics off. Turn it off and PostHog and Google Analytics stop straight away. Microsoft Clarity and Vercel’s page-speed measurement stop when the page next loads, and none of it loads again. Session replay never records what you type, and it hides the screens that show your household’s allergies and diet and your account details.
Analytics on app.pantri.app is on in this browser.
| Set by | Name | What it does | How long it lasts |
|---|---|---|---|
| PostHog | ph_…_posthog (cookie and matching local storage entry) | Recognises the same browser across visits so product analytics and session replay can be joined into one journey. | 365 days |
| PostHog | ph_…_window_id, ph_…_primary_window_exists | Tells one browser tab apart from another within a single visit. | Until you close the tab |
| Microsoft (Clarity) | Cookies set by clarity.ms | Session replay and heatmaps. We are being straight with you here: these are set by Microsoft’s own script, and their names and lifetimes are chosen and documented by Microsoft, not by us — so we will not quote figures we do not control. | Set by Microsoft |
| Google (Analytics) | _ga and _ga_ followed by the measurement id | Recognises this browser so page views can be counted as one visit. Not set if you turn analytics off. Google Signals and ad personalisation are off, so this is not used to advertise to you. Google publishes a 2-year lifetime for both cookies. | 2 years |
| Vercel | None | Speed Insights measures how fast pages loaded for you. It sets no cookie and writes nothing to your browser’s storage; it sends the timings and the address of the page they were measured on. It stops when you turn analytics off, because it is measurement of you rather than something the app needs to function. | Nothing stored on your device |
Our error monitor, Sentry, runs for everyone, because we cannot fix a fault we never hear about. It sets no cookie. It normally records nothing at all — a visit where nothing goes wrong is never recorded. When an error does occur, it attaches a replay of the moments leading up to it so we can reproduce the fault. In that recording all text is masked and all images and video are blocked — it captures the shape of the page and what you clicked, not what you could read on it.
Turning analytics off does not stop it, and we would rather name that than bury it.
Analytics is on unless you turn it off. You can turn it off:
Most web browsers allow you to control cookies through their settings. Here's how to do it in popular browsers:
We stopped showing a cookie banner on 12 October 2026. Australian privacy law asks us to tell you what we collect and why, which this page and our Privacy Policy do, and we let you turn analytics off at any time (section 5). If you said no on the old banner, that choice still stands.
If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):
We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated \"Last Updated\" date. Your continued use of Pantri constitutes your acceptance of the updated Cookie Policy.
If you have questions about our use of cookies, please contact us through the app settings or support channels. We're happy to clarify how we use cookies and help you manage your preferences.