Cookie & Storage Policy

What the site uses

The audited website uses one essential authentication cookie named cg_session for signed-in web CRM and administration areas. It is HTTP-only, uses SameSite=Lax, is restricted to secure transport in production, and is configured to expire after 30 days.

The public customer demo uses the browser’s session storage to keep fictional demo profile, saved venue and booking state for the current tab. Closing the tab normally clears that storage.

Why it is used

The authentication cookie keeps authorized staff signed in and protects restricted routes. Session storage makes the interactive customer demo work without sending its demo profile and booking state to the server.

Analytics and advertising

No analytics, advertising, social-pixel or cross-site tracking SDK was found in the audited web or customer-app dependencies and source. ClubGate therefore does not show a non-essential cookie consent banner. This policy and consent behavior must be revisited before adding any such technology.

Your choices

You can block or clear browser cookies and site storage in browser settings. Blocking the essential authentication cookie will prevent web staff areas from staying signed in. Clearing session storage resets the customer demo.

Changes

Any new cookie, analytics or tracking provider must be audited, disclosed here and—where required—disabled until the user makes an applicable consent choice.