Cookies & Analytics Disclosure

Authentication cookies. When a host signs in, our authentication provider (Supabase) sets cookies that hold your session so you stay signed in between page loads. These are essential; without them you would be signed out on every navigation. They are marked secure in production and are cleared when you sign out.

A private premium planner instead receives a twelve-hour, HttpOnly, same-site planner cookie. PartyScrum stores only a hash of its random token and revokes it when the planner signs out or rotates credentials.

After a guest passes the event gate, PartyScrum sets a short-lived, HttpOnly cookie scoped to an event session. JavaScript cannot read it, and the database stores only a hash of its random token. It expires after twelve hours and is revoked when the guest exits or the planner removes access.

The beta access screen may use sessionStorage for a tab-local preview flag. That flag is not a guest credential and contains no event secret.

We use Vercel Analytics to understand aggregate traffic; which pages are visited and general performance. Vercel Analytics is designed to be privacy-friendly: it does not set advertising cookies, does not fingerprint your device, and does not follow you across other websites. We receive aggregated reports, not profiles of individual people.

• No advertising or retargeting cookies.
• No cross-site tracking pixels.
• No session-recording or heatmap tools.
• No selling of any data collected through cookies or analytics.

You can block or delete cookies in your browser settings. Because our authentication cookies are strictly necessary, blocking them will prevent you from signing in as a host. Clearing the guest cookie will prompt you to pass the event gate again.

If you upgrade a party, Stripe handles checkout and may set its own cookies to process the payment and prevent fraud. Stripe's use of cookies is governed by its own privacy policy.