This policy covers cookies and similar technologies, meaning local storage, session storage, IndexedDB and tracking tags, on the ClubStreak website and web application. Read it alongside the Privacy Policy, which explains everything else we do with personal data.
1. The short version
- Necessary storage. Some storage is required for the Service to work at all: keeping you signed in, and resolving a payment you started. We use it without asking, because without it there is no Service.
- Analytics is optional, and off until you say yes. On our public pages only, we would like to use Google Analytics to understand which pages people find useful. It does not load, and sets nothing on your device, unless you agree. Saying no costs you nothing and the site works exactly the same.
- Analytics never runs once you sign in. There is no analytics, and no third-party tag of any kind, in the academy or student areas of the app. No academy data and no student data ever reaches Google.
- No third-party advertising storage. There are no advertising cookies, no advertising pixels and no social media widgets on this site, and we do not sell or share personal data. Any advertising inside ClubStreak is chosen and served by us, on our own servers, and sends nothing about you to an advertiser. See Section 4.1 of the Privacy Policy.
2. Your choice, and how to change it
The first time you visit our public pages we show you a choice. Analytics stays off until you accept it. Rejecting is one click, in the same place and as prominent as accepting, and we do not ask again straight away or make you hunt through a menu to decline.
- You can change your mind at any time using the Cookie settings link in the footer of every page on this website. Withdrawing is as easy as giving, and takes effect immediately.
- Nothing is withheld if you decline. We do not use cookie walls. Every page, sign-up route and support channel works the same either way.
- We do not treat silence as agreement. Closing or ignoring the banner leaves analytics off. Nothing is pre-ticked.
- We ask again after six months rather than treating a choice as permanent, so an old decision does not follow you indefinitely.
Your choice is itself recorded in a small first-party cookie, described in Section 4. That cookie is necessary: without it we could not remember that you said no.
3. What these technologies are
- Cookies are small text files a website stores in your browser and can read back on a later visit. First-party cookies are set by the site you are on. Third-party cookies are set by another company whose code runs on the page.
- Local storage, session storage and IndexedDB are browser features that store data on your device. Session storage clears when the tab closes; the others persist until cleared.
- Tags and pixels are small pieces of code, or a request for a tiny image, that report that a page was viewed. Google Analytics is delivered as a tag.
Where the law refers to cookies it generally means all of these, and so do we. The rules that matter turn on what the storage is for, not on which technique is used.
4. Strictly necessary storage
This storage is used without asking, because it is required to deliver a service you have explicitly requested. It is all first-party, none of it is shared with anyone, and none of it contains an advertising identifier.
4.1 Our public pages
| Storage | Purpose | Lifetime |
|---|---|---|
| cs_consent (cookie) | Records whether you accepted or declined analytics, so we honour your choice and do not ask again on every page | 6 months, then we ask again |
If you have not made a choice yet, that is the only thing our public pages store. There is no advertising pixel and no social media widget on any of them.
4.2 The web application, after you sign in
| Storage | Purpose | Lifetime |
|---|---|---|
| Sign-in session (first-party browser storage set by our authentication infrastructure) | Keeps you signed in and refreshes your session so you are not re-entering a code on every visit | Until you sign out or clear browser data |
| Payment in progress (session storage) | Remembers the reference of a payment you started, so an interrupted checkout resolves safely and is never charged twice | Cleared when the payment completes or the tab closes |
5. Analytics, and only with your agreement
If you accept analytics, we load Google Analytics 4, provided by Google Ireland Limited for visitors in Europe and by Google LLC elsewhere. We use it to count visits, see which pages and search terms bring people to us, and understand where people give up, so we can write better pages. That is the whole purpose.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
| _ga | clubstreak.com (first-party, written by Google's tag) | Assigns a random identifier to your browser so repeat visits are counted as one visitor rather than several | 13 months |
| _ga_<stream identifier> | clubstreak.com (first-party, written by Google's tag) | Holds the state of your current visit, so a session is measured as one session | 13 months |
Both are first-party cookies, readable only on our own domain. If Google changes, adds or renames a cookie its tag sets, we will update this table.
5.1 What it collects
Pages viewed and when, referring page or search engine, approximate location at country and region level, browser and operating system, device type and screen size, language, and how you moved between our pages.
5.2 What it does not collect
- No identity. We never send Google your name, email address, phone number, your ClubStreak account identifier or any other identifier that points back to you. The Google Analytics User-ID feature is switched off.
- Nothing from behind sign-in. The tag is not present on any signed-in page, so no student record, attendance mark, fee, payment, message or photo is ever measured.
- No form contents. Anything you type into an enquiry or sign-up form goes to us, not to Google.
6. How we have configured Google Analytics
Analytics can be run in ways that turn it into advertising infrastructure. We have turned those ways off, and we state them here so the commitment is auditable rather than implied.
| Setting | Our configuration |
|---|---|
| Google Signals | Off. Your activity on our site is not joined to a signed-in Google account or followed across devices. |
| Advertising features and remarketing | Off. No audience is built, no remarketing list is created, and the property is linked to no Google Ads or Display & Video account. |
| Data sharing with Google products and services | Off, including sharing for Google product improvement and benchmarking. |
| IP addresses | Google Analytics 4 does not log or store IP addresses. Your IP is used momentarily to derive an approximate country and region, then discarded. |
| Data retention | 14 months, after which event-level data is deleted automatically. |
| Google's role | Processor, not controller. We have accepted Google's Ads Data Processing Terms, so Google processes this data on our documented instructions and may not use it for its own purposes. |
6.1 International transfers
Analytics data may be processed on Google infrastructure outside your country, including in the United States. For transfers out of the European Economic Area, the United Kingdom and Switzerland, Google LLC is certified under the EU-US Data Privacy Framework and its UK Extension and Swiss-US commitments, and Google’s Standard Contractual Clauses apply in addition and as a fallback. Section 10 of the Privacy Policy explains our transfer safeguards generally.
6.2 Google's own policies
Google is a separate company and publishes its own terms for this product, covering how Google Analytics collects data and how Google uses data from sites that use its services. Those documents apply to Google’s handling of the data alongside this policy, and are linked from Google’s Analytics and privacy pages.
7. Payment checkout
When you pay online, the payment step is served by a regulated payment provider. Those pages are operated by the provider and may set the provider’s own strictly necessary cookies for fraud prevention and to complete the transaction. That storage is necessary to process a payment you asked for, so it is not covered by the analytics choice above, and the provider’s own policies apply to that step.
8. What we never do in the signed-in app
Analytics runs on our public pages only. It is never loaded once you sign in, and it is never loaded in a student’s account. This is a design rule, not a setting we might quietly change: it keeps academy and student data out of Google entirely, and it is how we meet Section 9(3) of India’s Digital Personal Data Protection Act, which prohibits tracking and behavioural monitoring of anyone under 18.
Concretely, in the signed-in application there is:
- no analytics tag, no tag manager, and no third-party script that measures behaviour;
- no advertising pixel, no conversion tracking and no social media widget;
- no session recording, no heatmap tool and no scroll or mouse tracking;
- no profiling of students, and no monitoring of a student’s behaviour beyond providing the Service itself.
Because no personal data of an academy or its students reaches Google, Google is not a sub-processor under the Academy Data Processing Addendum, and academies need take no action in relation to it.
9. Legal basis, by where you are
We show the same choice to everyone, wherever you are, rather than only where a law compels it. The basis we rely on differs by region.
| Where you are | Necessary storage | Analytics |
|---|---|---|
| European Economic Area, United Kingdom, Switzerland | Exempt from the consent requirement in Article 5(3) of the ePrivacy Directive, and in the UK regulation 6(4) of PECR, because it is strictly necessary to provide a service you requested. The processing that follows rests on our legitimate interests, or on performance of our contract with you. | Your prior consent, under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) UK and EU GDPR. Withdrawable at any time, with no effect on what happened before you withdrew. |
| India | Necessary to provide the Service you have requested, with notice given in this policy and the Privacy Policy. | Your consent under the Digital Personal Data Protection Act 2023, given by a clear affirmative action, and withdrawable as easily as it was given. Never sought from, or applied to, anyone under 18. |
| California | A business purpose under the CCPA as amended by the CPRA. | Google acts as a service provider under written contract, so this is neither a sale nor a share for cross-context behavioural advertising. We nonetheless offer the choice, and we honour opt-out preference signals as set out in Section 10. |
| Elsewhere | Necessary to provide the Service. | Your consent, on the same terms as above. |
10. Do Not Track and Global Privacy Control
We honour Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a valid opt-out: analytics stays off, the choice is recorded as declined without you having to click anything, and we do not badger you with a banner asking you to reconsider.
We treat a Do Not Track header the same way, even though it carries no legal force, because it is a clear enough statement of what you want.
Beyond that, we do not track people across sites and we neither sell nor share personal data, so there is no third-party advertising for either signal to switch off. We additionally treat both signals as a request to turn off interest-based advertising inside ClubStreak.
11. Managing storage in your browser
- Our controls. The Cookie settings link in the footer reopens your choice at any time. Declining there removes the analytics cookies described in Section 5 and stops the tag loading again.
- Your browser. Every major browser lets you block or clear cookies and site data, per site or entirely. Clearing ours signs you out of the web application and resets your cookie choice so we will ask again.
- Google’s own opt-out. Google publishes a browser add-on that blocks Google Analytics on every site that uses it, if you would rather set this once and not per site.
Blocking strictly necessary storage stops sign-in from persisting and will make the web application unusable. Blocking analytics makes no difference to anything you can see, and none to profiling, because there is none either way.
12. Changes and contact
If we introduce any further storage that is not strictly necessary, we will update this policy first, ask for your consent before it loads, and default it to off. If we ever changed the rule in Section 8 and measured the signed-in application, we would say so here and seek fresh consent before doing it, not rely on a consent you gave for something else.
We publish the date of the last change at the top of this page. Questions about anything here, or a request to see what we hold, go to:
EarlyDot Tech Private Limited
No 9, 2nd Floor, 27th Main, 100 Feet Ring Road, BTM 1st Stage, Bengaluru, Karnataka 560068
Privacy questions and requests: legal@clubstreak.com