Cookie Policy
Last updated: June 21, 2026
This Cookie Policy explains how Plain Technologies Inc., doing business as donna.sh ("Donna," "we," "us," or "our") uses cookies and similar technologies on donna.sh and associated web properties. Read this alongside our Privacy Policy.
1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. We also use similar technologies including local storage, session storage, and tracking pixels. All such technologies are referred to here as "cookies."
- Session cookies: Expire when you close your browser
- Persistent cookies: Remain on your device for a defined period or until you delete them
- First-party cookies: Set by Donna directly
- Third-party cookies: Set by our service providers on our behalf
2. Categories of Cookies We Use
a. Strictly Necessary Cookies
These are required to operate the Services securely and cannot be disabled. They support:
- User authentication and session integrity
- CSRF (cross-site request forgery) protection
- Infrastructure load balancing and request routing
- Storing your cookie consent preferences
We do not need your consent for strictly necessary cookies as they are essential to providing the service you requested.
b. Functional Cookies
These support non-essential but user-requested functionality:
- Remembering your preferences (theme, language, layout density)
- Maintaining UI state across sessions
- Keeping you signed in between visits
c. Analytics and Performance Cookies
If and when we use analytics tools, they help us understand how the Services are used and how to improve them — tracking aggregate usage patterns, performance metrics, and feature adoption. Analytics data is aggregated and de-identified where possible. We do not build individual advertising profiles. We will update this policy to name specific providers before enabling any analytics cookies.
d. Security and Integrity Cookies
Certain cookies support our security controls: bot detection and abuse prevention, rate limiting, and session integrity validation.
3. What We Do Not Use Cookies For
We do not use cookies for:
- Behavioral advertising or ad targeting
- Cross-site tracking for third-party advertising networks
- Selling or sharing data with data brokers or advertisers
4. Third-Party Cookies
Our service providers may set cookies on our behalf to perform services we have engaged them for. We contractually restrict these providers from using your data for their own independent purposes.
| Provider | Purpose | Category |
|---|---|---|
| Clerk | Authentication and session management | Strictly Necessary |
| Stripe | Payment processing (checkout pages only) | Strictly Necessary |
| Google Cloud | Infrastructure and CDN | Strictly Necessary |
We do not use third-party advertising cookies or data broker cookies. If we add analytics providers in the future, we will update this table before enabling them.
5. Legal Basis for Cookie Use
| Cookie Category | Legal Basis |
|---|---|
| Strictly necessary | Legitimate interest / contract performance |
| Functional | Legitimate interest or consent (where required) |
| Analytics | Consent |
| Security | Legitimate interest |
6. Your Choices
Browser-Level Controls
Most browsers allow you to block or delete cookies through their settings. Note that blocking strictly necessary cookies will impair the functionality of the Services, including authentication.
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Objecting to Cookie Use
If you wish to object to any cookie use, contact privacy@donna.sh.
Do Not Track
We currently do not respond to browser "Do Not Track" signals due to the absence of a consistent industry standard.
7. Cookie Data and Privacy
Where cookies involve personal data, that data is processed in accordance with our Privacy Policy, retained only as long as necessary for its stated purpose, protected by technical and organizational security measures, and accessible only to authorized Donna personnel and the relevant service provider.
8. International Transfers
Cookie-related data may be processed in countries outside your country of residence, including the United States. Where required by applicable law, we implement appropriate transfer safeguards such as Standard Contractual Clauses.
9. Changes to This Cookie Policy
We may update this Cookie Policy as our practices change or laws require. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the Services.
10. Contact
Cookie questions or concerns: privacy@donna.sh