Cookies, and what they're for.

This policy explains how ClubTable Limited ("ClubTable", "we", "us") uses cookies and similar technologies on www.clubtable.co and in our app (together, "the Service"). It sits alongside our Privacy Policy, which explains how we handle your personal data more generally.

ClubTable Limited is registered in England and Wales, number 16140479, at 16 Wiseton Road, London SW17 7EE.

Cookies are small text files placed on your device when you visit a website, so that the site can remember something about your visit — that you are signed in, say, or which region you chose. Similar technologies include local storage, pixels, software development kits (SDKs) in our apps, and other techniques that help us recognize your device or remember your preferences. This policy covers all of them.

Under the Privacy and Electronic Communications Regulations 2003 (PECR), strictly necessary cookies do not need your consent. Everything else does, and we ask before we set it.

• Strictly necessary. The Service cannot work without them — protecting forms against forgery, keeping your place while you sign up, processing a payment securely. You cannot turn these off and still use the Service.

• Preferences. Your choices, such as your region and your answer to the cookie banner.

• Analytics. Understanding how the Service is used so we can improve it. Our analytics (Umami) runs only after you opt in, and is designed to work without cookies — it does not set any and does not follow you across other sites.

• Marketing. We do not run third-party advertising on the Service today and we set no marketing cookies. If this changes, we will update this policy and ask for your consent before placing any.

Each item names what it is for, which kind it is, and how long it lasts.

• XSRF-TOKEN — protects the forms you submit against cross-site request forgery. Strictly necessary. Cookie; expires after one hour.

• onboarding_session — keeps your place while you sign up, so a page refresh does not lose your progress. Strictly necessary. Cookie; lasts for the signup session only.

• cookieConsent — remembers the choice you made on the cookie banner so we do not ask again. Preference. Held in your browser's local storage, not a cookie; kept until you clear it or change your choice.

• token — keeps you signed in once you have an account. Strictly necessary. Local storage; removed when you sign out.

• Stripe (__stripe_mid, __stripe_sid) — set by our payment provider only on pages where you pay, to process the payment securely and prevent fraud. Strictly necessary. Cookies; about one year and thirty minutes respectively. See Stripe's own cookie policy.

• Analytics — none. Umami is cookieless; it runs only after you opt in.

We will add to this list before we add to the cookies.

Third parties may set cookies only where they are required to provide their services to us — processing payments, protecting against fraud, delivering content, or enabling sign-in with Apple, Google or LinkedIn where you choose it. We do not allow third parties to set cookies that track you across other sites. Each has its own privacy and cookie policy, which we recommend you read.

When you first visit the Service we ask which non-essential cookies you will accept. You can change that answer at any time from the cookie settings in the footer, or from your privacy settings once you have an account. Withdrawing your consent does not affect the lawfulness of cookies already set while your consent was valid.

You can also block or delete cookies in your browser settings, and most browsers let you block third-party cookies separately from first-party ones. Blocking strictly necessary cookies will stop parts of the Service from working.

When we change this policy we update the date at the top. If we ever add cookies that need your consent, we will ask before setting them.

Questions about cookies: privacy@clubtable.co. If you are unhappy with our response, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.