Cookie Policy

This Cookie Policy explains how the Penn Golf Clubhouse uses cookies and similar technologies. We keep it simple: we use as few cookies as possible and never for advertising or cross-site tracking.

This Cookie Policy was prepared for informational purposes. It does not constitute legal advice. A qualified attorney should review it before formal public launch.

Cookies we use

The Clubhouse sets one category of cookies: essential session cookies set by our authentication provider, NextAuth / Auth.js, to keep you signed in. These cookies are strictly necessary to operate the service — without them, the Clubhouse cannot identify you as a signed-in member.

• Session cookie (NextAuth / Auth.js). A JSON Web Token (JWT) session cookie with an approximate 30-day expiry. It contains an encrypted reference to your session and is used exclusively to authenticate your requests. It is a first-party cookie scoped to this domain.

What we do NOT use

• No advertising cookies or ad-network pixels.
• No cross-site tracking cookies.
• No third-party analytics pixels (e.g., Google Analytics, Meta Pixel, Mixpanel).
• No persistent preference cookies beyond what is strictly necessary to keep you signed in.

Cloudflare Turnstile

Public-facing forms on the Clubhouse (such as the profile claim form) are protected by a Cloudflare Turnstile bot challenge to prevent automated abuse. As part of that verification, Cloudflare may set its own cookie or use your IP address and browser signals. That processing is governed by Cloudflare’s Privacy Policy. We do not control or receive the data Cloudflare collects for its bot-challenge; we only receive a pass/fail signal.

Managing cookies

You can clear or block cookies through your browser’s settings. Most browsers allow you to view, delete, and block cookies on a per-site basis. Instructions vary by browser:

• Chrome: Settings › Privacy and security › Cookies and other site data
• Safari: Settings › Privacy › Manage Website Data
• Firefox: Settings › Privacy & Security › Cookies and Site Data

Please note: if you block or delete the essential session cookie, you will be signed out and will not be able to sign back in until you allow the cookie again. Because it is strictly necessary, there is no opt-out mechanism that preserves full functionality.

Contact

Questions about this policy: email [email protected]. The Clubhouse is operated by Ryan Chang, Penn Men’s Golf, Class of 2028.