Legal

Cookie preferences

Last updated 24 June 2026. Working draft pending external legal review.

The short version

We use the minimum number of cookies needed to make the product work, plus an anonymous analytics cookie from our host. We don’t use advertising trackers and we don’t share cookie data with operators. No banner is required for purely-functional cookies under UK law, which is most of what we set; the analytics cookie can be turned off in your browser.

What we set

Strictly necessary (always on)

  • Supabase auth session cookies (sb-…-auth-token, sb-…-auth-token-code-verifier). Set when you sign in; they keep you signed in across pages. Without these, the dashboard, the watchlist and the member-only emails cannot function. Deleted when you sign out.
  • Next.js routing helpers (e.g. __next_hmr_refresh_hash in dev). Set by the framework to keep routing snappy; no user data.

Analytics (anonymous)

  • Vercel Speed Insights — pseudonymous, no cross-site tracking, no IP stored. We use it to spot pages that are slow and fix them. You can disable it in your browser (block third-party cookies for vercel.com) without affecting the rest of the site.

What we don’t set

  • No advertising cookies. We don’t run ads.
  • No Google/Facebook/TikTok tracking pixels.
  • No third-party retargeting from the operators.
  • No cross-site identity tracking.

How to turn cookies off

The strictly-necessary ones can’t be turned off without breaking sign-in. The analytics one (Vercel) follows your browser’s “Block third-party cookies” setting:

  • Chrome: Settings → Privacy and security → Third-party cookies → “Block third-party cookies”.
  • Safari: Settings → Privacy → “Prevent cross-site tracking”.
  • Firefox: Settings → Privacy & Security → Enhanced Tracking Protection → Strict.
  • Edge: Settings → Cookies and site permissions → “Block third-party cookies”.

Changes

We bump the “Last updated” date at the top if this list changes. If we ever added a new category (we don’t plan to), we’d ship a banner asking for consent before setting any.

Questions: hello@starholidaysclub.com.