TECHNICAL STORAGE

Data Processing & Cookies

PlanXtur uses storage needed for login, app features and optional Android push. This overview is based on the reviewed code.

Last updated: 7 October 2026

The marketing website

The public website at planxtur.dk consists of local HTML, CSS and JavaScript. The code does not use cookies, localStorage, sessionStorage, analytics tools, advertising pixels or third-party scripts. The small scripts update the year and point app links to the web app.

The web app

Session cookie: sammen_session is used for login at app.planxtur.dk. It is technically necessary to keep the user logged in, is HttpOnly and SameSite=Lax, and is set with Secure in production. Its maximum lifetime is 30 days. Logging out clears the cookie.
localStorage: On startup, the web app removes an old demo key, sammen-demo-v1. The current web app does not store login or group data in localStorage. It can save the language preference under planxtur-language to remember your chosen language, and a marker under planxtur-onboarding-skipped-<user-id> to remember that the onboarding guide is hidden. The code does not define an expiry time for these local preferences. You can remove them through your browser settings.
Language on your account: Your chosen language can also be saved on your user account as da or en, so PlanXtur can remember your language choice when you log in.
sessionStorage: No use of sessionStorage was found in the marketing website or web app.
PWA cache: The web app registers a service worker that saves its own static files in the browser’s Cache Storage so the app can handle a missing network connection. This is not an analytics or marketing feature.

The Android app and push

The Android app saves a session token, an installation ID and, when push is allowed, a push token in the device’s secure storage. Push requires permission on the device. PlanXtur uses Firebase Cloud Messaging / Google to deliver reminders to registered devices. Firebase is not loaded as an analytics or advertising script on the marketing website or in the web app’s HTML.

Payment and external websites

When an administrator starts a Plus purchase or opens Customer Portal, they are taken to Stripe. Stripe may use its own cookies and similar technologies on its pages in accordance with its own information. PlanXtur’s marketing website does not load Stripe scripts. Links to external calendar and app services open only when you choose them.

Analytics, marketing and choices

No analytics or marketing cookies or other trackers were found in the reviewed PlanXtur code. A consent banner for these purposes has therefore not been created. You can delete cookies and local storage through your browser settings; this may log you out or remove offline files.

If non-essential tracking is added later, it must be assessed and, where necessary, activated only after valid consent. A banner alone would not make undisclosed tracking lawful.

Manual checks before publication

Check the actual production environment for cookies and scripts from hosting, reverse proxy, transitions to Stripe and any later integrations. Provider, purpose and retention must be documented. If non-essential cookies are present without consent, this is a technical error that must be corrected before use.

Also read the Privacy Policy, or email kontakt@planxtur.dk.