Cookies
Last updated 11 October 2026.
PlatPost sets no advertising cookies. The only analytics cookies are the two Google Analytics cookies at the end of the table, and they exist only if you press "Accept all": until then no Google script loads and nothing is sent to Google. The sign-in page runs a check of our own that sets no cookie. It can also load a security check from Cloudflare that tells a person from a program; it is not advertising or analytics, and Cloudflare's own policy covers what it stores in your browser. Every other cookie below is strictly necessary for the service you asked for: staying signed in, and remembering your answer to the banner and to the "Remember me" box, a marker that you may be signed in, and the notices you put off with "Remind me later". Under UK GDPR and PECR, strictly necessary cookies do not need consent.
The notification numbers also keep two small values in your browser's own storage: the last total of the numbers, so the chime you chose plays once and not on every page, and a marker so the gold number shines once. They hold counts only and never leave your browser. If you turn on push in Settings, your browser keeps a small PlatPost program that shows the push message; turning push off removes it.
The banner asks for your choice. "Accept all" turns on the two Google Analytics cookies; "Essential only" leaves them off. Your choice is kept for 12 months, then the banner asks again. You can change or withdraw your choice here at any time: a change to "Essential only" or "Clear my choice" removes the Google cookies from your browser and stops the counting on the whole site at once.
| Cookie | Purpose | Lifetime |
|---|---|---|
| plat_consent | Remembers your cookie choice so the banner does not repeat | 12 months |
| sb-<id>-auth-token | Keeps you signed in. Set by our sign-in system after a password, link or Google sign-in | 30 days if you ticked "Remember me", else until you close the browser (or until you sign out); refreshed while you use the app. A Google sign-in or a session from before the box existed keeps the longer default |
| plat_signed_in | A marker with no personal data. It tells a public page that you may be signed in, so a buy link goes to the right place. The sign-in cookie itself is hidden from page scripts | The same as your sign-in; removed when you sign out |
| plat_remember | Remembers your answer to the "Remember me" box on the sign-in form, so your sign-in keeps the life you chose | 30 days if you ticked the box, else until you close the browser; removed when you sign out |
| plat_home | Remembers which door you last signed in through, PlatPost or the Builders Circle, so the home address opens the right one. One word, nothing about you | One year; removed when you sign out |
| plat_door | Set only when you start a Google or email-link sign-in through a named door, the Builders Circle page or a PlatPost link. It carries that one word to the page the sign-in returns to, so you land on the right side | One hour, or until the sign-in returns; removed then |
| plat_notes_later | Set only when you press or point at "Remind me later" on a notice. It holds the names of the notices you put off, and nothing about you, so they stay hidden until your next visit | Until you close the browser |
| _ga | Optional, only if you accept all. Google Analytics gives your browser a random number so it can count one visitor across visits. It holds no name and no email | 2 years |
| _ga_K24GCRTF2N | Optional, only if you accept all. Google Analytics keeps the state of your current visit | 2 years |
The sign-in cookie may be split into two or more parts with a numbered suffix when it is long; they are one cookie for this purpose. A separate cookie exists only for the site operator's admin sign-in and is never set for visitors. Stripe sets its own cookies on the checkout page under its own policy, and X sets its own when you connect an account there.