CampGrid does not use advertising cookies, fingerprinting or cross-site tracking. This inventory must be re-audited against production before publication.
1. What this Policy covers
Cookies and similar browser storage can remember a session, security token, language choice or pseudonymous measurement identifier. This Policy explains CampGrid-controlled storage and third-party storage encountered during payment.
2. Strictly necessary storage
CampGrid uses the following first-party values when the related feature is active:
- cg_session: HttpOnly authentication session token; required to keep a user signed in.
- cg_csrf: request-verification token readable by the CampGrid frontend; required to prevent forged state-changing requests.
- cg_locale: remembers the language selected by the user.
- cg_analytics_optout: remembers an analytics objection or opt-out.
3. First-party audience measurement
If enabled after compliance validation, cg_analytics provides a random pseudonymous identifier used only to measure CampGrid pages and product milestones. Events exclude names, notes, locations and family content.
Audience measurement may operate without consent only where every applicable exemption condition is met, including strict purpose limitation, first-party control, short identifier life, limited retention, no cross-site combination and an accessible opt-out. Otherwise CampGrid will request consent before setting it.
4. Stripe
Selecting paid Checkout or the Customer Portal navigates to Stripe. Stripe may set its own security, fraud-prevention and payment cookies under its policy. CampGrid does not receive Stripe cookie values.
5. Duration
Session and CSRF storage expires with the authenticated session. Language and opt-out choices use the period stated in the live inventory. Any analytics identifier and raw event retention must match docs/DATA_RETENTION.md and be reviewed periodically.
6. Your controls
Use the CampGrid privacy control to opt out of first-party analytics. You can also clear browser storage, but removing essential session values signs you out and blocking them may prevent account functions.
Contact jlr.venturescorp@gmail.com if the live storage inventory differs from this Policy.
7. Changes
We update this Policy and the effective date when storage purposes, providers or retention change. New non-essential purposes will not be activated without the choice required by law.
This initial document requires review by a qualified professional. Mandatory consumer rights continue to apply.