HostIt's own app code doesn't set any HTTP cookies. We do, however, advertise on Google, and Google's advertising tools set cookies on your device to measure whether an ad worked and to show our ads to people who've visited before. This page explains what we store ourselves, what Google's ad and analytics tools store on our behalf, and how to control or clear any of it.
document.cookie in its own
code. Any cookie you see for mypartyhost.com or
party-planner-12903.web.app was set by an embedded third-party
tool — most likely Google Ads or Google Analytics (described below).
These live in your browser's Local Storage, which is per-device and never sent to a third party. The data here is either required for the app to function or remembers a preference you set inside the app.
| Key | Purpose | Category | Lifetime |
|---|---|---|---|
| firebase:authUser:… | Keeps you signed in across page reloads. Set and cleared by Firebase Authentication. | Strictly necessary | Until you sign out or clear browser data |
| hostit.lastActiveAt | Timestamp used to sign you out after 7 days of inactivity. | Strictly necessary | Refreshed each visit; removed on sign-out |
| hostit.oauthPending | CSRF-protection state for the optional "Import contacts from Gmail" redirect flow. | Strictly necessary | ~5 minutes; deleted as soon as the redirect completes |
| ppl:backup:{your_uid} | Local snapshot of your planner data so we can recover the page if cloud sync is interrupted. | Functional | Overwritten on every save |
| pp_suf_unit | Whether the food planner shows quantities as servings or weight. | Preference | Until you change it or clear browser data |
We run ads on Google to help people discover HostIt. To know whether those ads work, we use Google's standard measurement and advertising products. These are operated by Google as a third party — the cookies and identifiers Google sets are governed by Google's Privacy Policy and Google's Cookie Policy.
Specifically, we may use:
_gcl_au, _gcl_aw, _gcl_dc.
IDE and test_cookie (set on doubleclick.net),
plus the _gcl_* family above.
_ga, _ga_*
(the GA4 client- and session-ID cookies).
These tools are used for measurement and advertising, not for selling your data. We don't share email addresses, phone numbers, party details, guest lists, or anything you enter inside the app with Google or anyone else for advertising purposes.
You can opt out of personalized Google ads at Google's My Ad Center, and you can install the Google Analytics Opt-out Browser Add-on to block Google Analytics across every site you visit.
HostIt honors the Global Privacy Control browser signal. GPC is a standards-based signal that tells websites you'd like to opt out of the sale or sharing of your personal information and of targeted advertising. Browsers and extensions that send the signal include Firefox (Settings → Privacy & Security → "Tell websites not to sell or share my data"), Brave (on by default), DuckDuckGo, and several privacy extensions such as Privacy Badger and OptMeowt.
When your browser sends GPC on a request to HostIt, we treat it as a valid opt-out under the
CCPA / CPRA, Colorado's CPA, and similar US state privacy laws. In practice that means: we
suppress any Google Ads, Google Analytics, and remarketing tags before they're allowed to load,
we don't add you to any advertising audience, and we set Google Consent Mode v2's
ad_storage, ad_user_data, ad_personalization, and
analytics_storage defaults to denied for your session. You don't
need to take any further action — the signal alone is enough.
Privacy laws like the GDPR (EU), UK GDPR, and CPRA (California) give you specific rights over advertising and analytics cookies — including the right to refuse non-essential cookies before they're set, and the right to request what we hold about you. If we detect that you're visiting from one of these regions, you'll see a consent prompt offering you a choice between strictly-necessary only and accepting analytics / advertising. You can change that choice at any time. To request data access or deletion, email support@mypartyhost.com.
You can clear cookies and Local Storage at any time through your browser:
Clearing browser storage will sign you out and remove the local recovery snapshot, but your party data lives in the cloud — you'll find it again on next sign-in.
If we add or remove tracking tools, we'll update the lists on this page first and bump the "Last updated" date at the top. Material changes will also surface inside the app before they take effect.
Email us at support@mypartyhost.com.