Cookie Policy
Last updated 7 October 2026
The short version
Ninecast uses four cookies, all of them strictly necessary to do something you asked for: connect an account, stay signed in, or keep a sign-in secure. We use no analytics cookies, no advertising cookies and no third-party trackers, which is why you are not asked to accept anything.
Why there is no cookie banner
Under the UK Privacy and Electronic Communications Regulations and the EU ePrivacy Directive, consent is needed before storing anything on your device except where the storage is strictly necessary to provide a service you have requested. Every cookie below meets that exemption. Nothing here profiles you, follows you between sites, or is shared with an advertiser.
Every cookie we set
| Cookie | What it does | How long | Set by |
|---|---|---|---|
notion_oauth_state | Ties the Notion or Instagram sign-in you just started to the browser that started it, so the reply cannot be forged. Set only when you press Connect. | 10 minutes | Ninecast |
social_popup | Remembers that a connection was started from the widget, so the pop-up closes itself instead of sending you to a page you did not ask for. | 10 minutes | Ninecast |
sb-…-auth-token | Keeps you signed in to the subscriber dashboard at /app. Set only if you have a paid account and sign in. Issued by Supabase, our database and authentication provider. | Until you sign out | Supabase, on our behalf |
ninecast_admin | Signs in the site owner to the private admin page. Never set for customers. | 12 hours | Ninecast |
The two connection cookies are marked HttpOnly and Secure, so they cannot be read by scripts and never travel unencrypted. They are deleted as soon as the connection finishes, successfully or not.
What we do not use
- No Google Analytics, and no analytics product of any kind.
- No advertising or remarketing pixels, from Meta or anyone else.
- No session recording, heatmaps or A/B testing tools.
- No cross-site tracking, and no data sold or shared with data brokers.
- No cookies at all on the planner widget your clients open. It is a page that reads a database and draws a grid.
Fonts and other embedded resources
The typefaces on this site are downloaded when the site is built and served from our own domain, so your browser makes no request to Google Fonts and no third party sees your IP address because of them. Images inside a planner are copies we hold on our own storage, for the same reason.
How we count where sign-ups come from
When you start a trial we record the referring website your browser reported and any utm_source in the address, alongside your email. That is stored in our database against your sign-up, not in a cookie, and it exists so we know which channels bring people in. It is described in the Privacy Policy, and you can ask us to delete it.
Controlling cookies
Your browser can block or delete cookies from any site, including this one. Blocking the two connection cookies will stop Notion and Instagram connections from completing, and blocking the sign-in cookie will stop the dashboard from keeping you signed in. Nothing else on the site depends on them.
Contact
Questions about this policy: support@getninecast.com. System Magic Studio Ltd, registered in England and Wales no. 17459005, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.