Legal
Cookie policy
The cookies and similar technologies Clubtab uses, and how to control them.
Last updated 7 October 2026 · Effective 7 October 2026
The short version
- We only use cookies that keep Clubtab working, unless you choose otherwise.
- Analytics and functional cookies are off until you allow them. No advertising or tracking cookies, ever.
- Change your choices any time from Cookie settings at the bottom of every page.
1. What cookies are
Cookies are small files a website saves on your device. Similar technologies, such as local storage, work in the same way, and this policy covers them too. Some are needed for a site to work. Others help us understand how it’s used.
2. How we use them
We use as few cookies as we can. We don’t use advertising or cross-site tracking cookies, and we don’t share cookie data with advertisers.
- Strictly necessary cookies keep you signed in, keep forms secure, prevent payment fraud and remember your cookie choices. Clubtab can’t work without them, so they don’t need consent.
- Functional cookies would remember settings or power a support chat. We don’t use any yet, and they’ll only be set if you allow them.
- Analytics cookies tell us how people use Clubtab and where they get stuck. We use PostHog, hosted in the EU. They’re only set if you allow them.
Without your permission, we only count visits, without cookies: nothing is saved on your device and we can’t recognise you. If you allow analytics, PostHog saves an id so we can see how a visit moves through the site and the app, maps where people click, and records some visits. Recordings hide every word on the page and everything typed. Analytics never runs on parents’ pages, receipts or anything a parent, sponsor or donor is sent.
The Data (Use and Access) Act 2025 allows some analytics and functional cookies without consent, provided people are told and can object. We’ll still ask first, because we think you should choose.
3. The cookies we use
| Name | Provider | Purpose | Category | Expires |
|---|---|---|---|---|
| clubtab_session, clubtab_app_session, clubtab_club_session | Clubtab | Keeps you signed in, one for each part of Clubtab | Strictly necessary | After 2 hours without using Clubtab |
| XSRF-TOKEN | Clubtab | Protects forms against cross-site request forgery | Strictly necessary | When the session ends |
| remember_web_* | Clubtab | Keeps you signed in on this device after you open a sign-in link | Strictly necessary | 30 days |
| ct_consent | Clubtab | Remembers your cookie choices | Strictly necessary | 12 months |
| __stripe_mid, __stripe_sid | Stripe | Prevents fraud on payment pages. Only set on payment and billing pages | Strictly necessary | 1 year; 30 minutes |
| ph_*_posthog | PostHog | Recognises your device, so analytics can follow a visit across the site and the app | Analytics | 1 year |
| ph_* (local storage) | PostHog | Keeps analytics and session recording settings for this visit | Analytics | Until you turn analytics off or clear your browser |
We check this list whenever we change the cookies we use, and add any functional or analytics cookie here before it’s ever set.
4. Storage in the app
The Clubtab app can be added to your home screen. It keeps one page on your device, so you see a clear message instead of an error when there’s no signal. It never stores money or team records on your device. This is part of the service you’ve asked for, so it doesn’t need consent.
5. Your choices
- When you first visit, a banner lets you accept or reject non-essential cookies, or choose by category. Rejecting is as easy as accepting.
- You can change your mind at any time from Cookie settings, linked at the bottom of every page.
- We ask again after 12 months, or sooner if we add a new type of cookie.
- You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop you signing in.
6. Emails
Our emails don’t contain tracking pixels, so we don’t know whether you open them.
7. Contact
Questions about cookies? Email [email protected]. For more about how we use personal data, see our Privacy notice.