Cookies, and what they're for.

This policy explains how ClubTable Limited ("ClubTable", "we", "us") uses cookies and similar technologies on www.clubtable.co and in our app (together, "the Service"). It sits alongside our Privacy Policy, which explains how we handle your personal data more generally.

ClubTable Limited is registered in England and Wales, number 16140479, at 16 Wiseton Road, London SW17 7EE.

Cookies are small text files placed on your device when you visit a website, so that the site can remember something about your visit — that you are signed in, say, or which region you chose. Similar technologies include local storage, pixels, software development kits (SDKs) in our apps, and other techniques that help us recognize your device or remember your preferences. This policy covers all of them.

Under the Privacy and Electronic Communications Regulations 2003 (PECR), strictly necessary cookies do not need your consent. Today, strictly necessary cookies are the only cookies we set — so there is nothing to ask a banner about.

Strictly necessary. The Service cannot work without them — protecting forms against forgery, keeping your place while you sign up, processing a payment securely. You cannot turn these off and still use the Service.

Preferences. Your choices, such as your region — and, if you opt out of analytics, the opt-out itself, saved at your request.

Analytics. Understanding how the Service is used so we can improve it. Our analytics (Umami) is self-hosted and cookieless — it sets nothing on your device and does not follow you across other sites. It runs under our legitimate interests, and you can opt out at any time at clubtable.co/privacy-choices.

Marketing. We do not run third-party advertising on the Service today and we set no marketing cookies. If this changes, we will update this policy and ask for your consent before placing any.

Each item names what it is for, which kind it is, and how long it lasts.

XSRF-TOKEN — protects the forms you submit against cross-site request forgery. Strictly necessary. Cookie; expires after one hour.

onboarding_session — keeps your place while you sign up, so a page refresh does not lose your progress. Strictly necessary. Cookie; lasts for the signup session only.

clubtable_analytics_optout — remembers that you opted out of analytics, if you did. Preference. Held in your browser’s local storage, not a cookie; saved only at your request and kept until you opt back in.

token — keeps you signed in once you have an account. Strictly necessary. Local storage; removed when you sign out.

Stripe (__stripe_mid, __stripe_sid) — set by our payment provider only on pages where you pay, to process the payment securely and prevent fraud. Strictly necessary. Cookies; about one year and thirty minutes respectively. See Stripe’s own cookie policy.

Analytics — none. Umami is cookieless and sets nothing on your device; it runs by default under our legitimate interests, and you can opt out at any time at clubtable.co/privacy-choices.

We will add to this list before we add to the cookies.

Third parties may set cookies only where they are required to provide their services to us — processing payments, protecting against fraud, delivering content, or enabling sign-in with Apple, Google or LinkedIn where you choose it. We do not allow third parties to set cookies that track you across other sites. Each has its own privacy and cookie policy, which we recommend you read.

We set only strictly necessary cookies, so there is no cookie banner to answer. Analytics is cookieless and can be switched off at any time at Privacy choices in the footer.

You can also block or delete cookies in your browser settings, and most browsers let you block third-party cookies separately from first-party ones. Blocking strictly necessary cookies will stop parts of the Service from working.

When we change this policy we update the date at the top. If we ever add cookies that need your consent, we will ask before setting them.

Questions about cookies: privacy@clubtable.co. If you are unhappy with our response, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.