Plenu Cookie Policy
Operated by HomeFill LLC d/b/a Plenu · Version 1.3 · Effective Date: October 11, 2026 · Last updated: October 11, 2026
This Cookie Policy explains how Plenu uses cookies and similar technologies on joinplenu.com and in our subscription service. Read it together with our Privacy Policy, which describes how we handle the information we collect.
1. What are cookies and similar technologies?
Cookies are small text files placed on your device when you visit a website; they help a site remember information about your visit. We use first-party cookies (set by Plenu) and third-party cookies (set by a provider we use). Some are session cookies (deleted when you close your browser) and some are persistent (they stay until they expire or you delete them). "Similar technologies" include pixels and web beacons, and local and session storage, which your browser uses to hold small amounts of information for the site.
2. How we use them
2.1 Strictly necessary
Required for the site to load, stay secure, let you sign in, apply your plan, and complete checkout. These cannot be switched off through our consent tools. They include our own sign-in/session cookie, the cookie that lets you open your delivery-preview page from your email, your verified-student-status and referral-code cookies, and our payment processor Stripe's security cookies (for fraud prevention during checkout).
2.2 Analytics
Help us understand how the site is used so we can improve it. We use PostHog, routed through our own domain and set up to mask page text, strip personal details from links, and not record sessions. We do not load analytics for a visit that sends a Global Privacy Control signal or that has used our on-site opt-out.
2.3 Advertising and attribution
When our advertising measurement is active, we use the Meta Pixel to measure whether one of our ads led to a visit or signup, and a first-party ad-source attribution cookie to record which ad or campaign link brought you here. These may set cookies and, for the Pixel, send Meta information about your visit. You can turn this off at any time, and we do not load it for a visit that sends GPC or has used our opt-out (see Section 4). We do not use the TikTok Pixel, the LinkedIn Insight Tag, or any session-recording or heatmap tools (such as Hotjar or Microsoft Clarity). We do not sell your personal information.
3. Cookies and similar technologies we use
Strictly necessary
| Name | Set by | Purpose | Type |
|---|---|---|---|
plenu_session |
Plenu | Keeps you signed in; session security (HttpOnly, Secure) | Persistent (30 days) |
d3ok |
Plenu | Lets you open your box-preview and swap page from your delivery email without signing in (HttpOnly, Secure) | Persistent (3 days) |
plenu_ref |
Plenu | Remembers a partner or referral code from a link you followed, so the right community or referrer is credited (HttpOnly, Secure) | Persistent (30 days) |
plenu_college_verified |
Plenu | Remembers that your student status is verified so your college rate applies (Secure) | Persistent (12 months) |
plenu_optout |
Plenu | Records your "Don't use my visit for ads or analytics" choice so we can honor it; when it is present, we do not set analytics, advertising, or attribution cookies (Secure) | Persistent (12 months) |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention and checkout session; set only on our pricing/checkout pages | __stripe_mid persistent, __stripe_sid session |
Analytics
| Name | Set by | Purpose | Type |
|---|---|---|---|
ph_phc_…_posthog (plus PostHog local/session storage keys) |
PostHog (via our domain) | Aggregated, de-identified site-usage analytics; loaded only when GPC is off and you have not opted out | Persistent + storage |
plenu_ab |
Plenu | Page A/B testing to improve the site; set only when GPC is off and you have not opted out | Persistent (30 days) |
Advertising and attribution
| Name | Set by | Purpose | Type |
|---|---|---|---|
plenu_src |
Plenu | Ad-source attribution (which ad or campaign link brought you here), recorded with your signup if you subscribe; set only when GPC is off and you have not opted out | Persistent (30 days) |
_fbp |
Meta | Meta Pixel ad measurement. Not currently set — the Meta Pixel is not installed. Appears only once advertising measurement is active | Persistent (when active) |
Similar technologies — browser storage (not cookies)
We also use your browser's local storage, which is not sent to our server with each request, for:
| Key | Purpose |
|---|---|
plenu_lang, plenu_lang_preview |
Remembers your language choice |
plenu_lead_v1 |
Records the time you entered your email in our inline email box, so we don't re-prompt you (a "lead captured" analytics event is also recorded) |
(Your opt-out choice is also saved as the plenu_optout cookie listed above, so our server can honor it, not only this browser.)
4. Your choices
On-site control. Use the "Don't use my visit for ads or analytics" button at joinplenu.com/cookies#choices to turn off analytics and advertising, including ad-source attribution. Your choice is saved in that browser and applies from your next page view. Strictly necessary cookies stay on because the site cannot work without them.
Global Privacy Control (GPC). We honor the GPC signal: if your browser sends it, we turn off analytics and advertising for your visit automatically, and we do not link your visit to an analytics identifier. We do not respond to "Do Not Track," because there is no common standard for it.
Other controls. Most browsers let you block or delete cookies in their settings, and you can limit ad tracking in Meta's own ad settings.
5. Third parties
PostHog, Meta, and Stripe set the cookies described above on our behalf and have their own privacy policies, which we encourage you to review. Some of our pages also load product images and web fonts from third-party servers (see our Privacy Policy, "How we share your information"); when they do, those servers receive your device's IP address as part of loading the content.
6. Changes to this policy
We may update this Cookie Policy, particularly if we add or remove cookies. If we add advertising or tracking cookies beyond what is described here, we will update this notice and our Your Privacy Choices controls before those cookies are used. The "Last updated" date at the top shows when this policy was last revised.
7. Contact
Questions about our use of cookies? Email privacy@plenu.online, or write to HomeFill LLC dba Plenu, Attn: Privacy Officer, 2141 Century Farms Parkway, Ste 1013, #113, Nashville, TN 37013. For more about how we handle your information, see our Privacy Policy.