Cookie Policy

1. Cookies and similar technologies

This shared policy describes cookies, localStorage, sessionStorage and similar technologies across Chubby Club’s first-party Services. The inventory is organized by purpose; only the entries relevant to the feature you use apply. A cookie is a small browser file; localStorage persists site data, while sessionStorage normally lasts for a tab session.

Strictly necessary storage supports delivery, sign-in, security, workflow continuity and recording privacy choices. Optional analytics requires the applicable consent. Turning off optional processing does not remove necessary security functions; blocking necessary cookies in browser settings can break sign-in and preferences.

2. Sign-in, security and preference storage

Signed-in Services use host-specific account sessions. The following named entries appear in the Partner and Refer inventories unless a narrower scope is stated:

• __Host-ck_app_session: keeps the account signed in on that host, not sibling hosts. Partner specifies up to 8 hours.
• ck_oidc_txn: binds state, nonce and PKCE during the sign-in transaction and is cleared on completion.
• __Host-ck_logout_hint: retains the signed identity token for complete sign-out and is cleared when sign-out completes.
• ck_sso_checked: a short-lived cooldown to prevent repeated silent sign-in redirects.
• __Host-ck_returning_member: an identity-free hint about whether silent sign-in may be attempted. Partner specifies up to 30 days.
• ck_privacy_v1: a signed, identity-free, versioned category choice on supported first-party hosts. Plus specifies up to one year when a choice is explicitly submitted. It contains category choices and policy timestamps, not a member identifier.
• ck_partner_context: remembers a signed-in user’s selected partner organization for up to 8 hours and may remain until expiry after sign-out.

Create names cc_consent for the browser choice. Create and My Chubby Club name ck_consent_mode and ck_gpc for region/GPC hints; their sources do not provide fixed durations. Admin’s session cookie expires after 24 hours of inactivity. Reserve and Verify describe necessary cookies without a complete named inventory.

The public directory uses cookie-consent in localStorage for category choices until changed or cleared, and chubby-analytics-consent, an identity-free first-party cookie lasting one year, so the server can reject analytics without consent. Its notice also describes necessary safe-area layout storage without a named key.

3. Workflow and app-preference storage

Partner uses sessionStorage for in-progress partnership applications in the current tab and localStorage for signed-in CRM workflow state. Those workflow records are not analytics consent.

Plus uses the following app-preference storage. These disclosures retain the original limits and controls:

Ordinary Plus browsing does not require a cookie. A stored installation estimate or app journey is not proof of membership and does not grant a benefit.

4. Optional analytics and diagnostics

• My Chubby Club: PostHog performance and viewport measurements use temporary in-memory identifiers after consent. Replay and automatic interaction capture are disabled; identifiers are not stored in cookies or localStorage.
• Public directory: Microsoft Clarity sets _clck and _clsk after analytics consent to associate views with a visitor and session recording, with advertising storage denied. Its source does not specify their lifetimes. Vercel Web Analytics and Speed Insights run after consent without cookies. First-party aggregate events use a daily rotating server-side pseudonym that is never stored in the browser and does not retain raw IP or clear user-agent in the analytics database.
• Admin: PostHog analytics and session replay require consent. Sentry error monitoring without replay is separately described in the Privacy Policy.

Reserve, Verify, Create, Plus, Refer and Partner state that they do not use non-essential analytics, advertising or tracking cookies. Partner also states it has no optional tracking runtime. Those statements do not describe the optional tools on My Chubby Club, the public directory or Admin. This Legal reader has no optional analytics or sign-in.

5. Maps and third-party destinations

Google Maps and embedded venue content may receive IP addresses, device information, interactions and, when permission is granted and the feature uses it, location. Providers can use their own storage under their own policies. Partner names Google Maps and Yelp; Plus uses Google Maps only when configured and loaded. These disclosures do not authorize advertising or cross-site tracking.

App stores, social providers, reservation platforms and directions links apply their own notices after you follow them. See Service Providers and the Google Privacy Policy.

6. Manage your choices

Use the privacy or cookie controls on the Service you use, or your browser’s site-data controls. Withdrawing analytics consent disables optional processing according to that Service’s controls. Clearing browser storage can remove preferences and sign you out. A banner may not appear when only strictly necessary storage is used.

We honor Global Privacy Control for sale, sharing and targeted-advertising opt-outs where applicable and do not ask you to override it. My Chubby Club, Create and the public directory also suppress optional analytics under GPC. The public directory additionally suppresses optional browser and first-party analytics under Do Not Track.

A shared preference on controlled subdomains does not imply a shared account session or a choice across unrelated domains and devices. Your Privacy Choices links to existing controls; this Legal reader does not save a preference.

7. Changes and contact

New vendors, purposes or storage require an updated inventory and appropriate choice before activation. For the versioned first-party preference described by Refer, a material purpose or vendor change increments the privacy policy version and requires a new category choice; ordinary copy corrections do not. Editorial consolidation does not itself change the platform consent version. Missing durations and inventories must be verified before this draft is approved.

For requests and questions, use the contacts in Data Requests & Deletion.