Cookie Policy
IDL HUB Ltd. · Last updated: July 2026 · Version 1.2
1. Introduction
This Cookies Policy explains how IDL HUB Ltd. (“we”, “us”, or “our”), the company behind PrivateStay.club, uses cookies and similar technologies when you visit or use our platform at privatestay.club.
PrivateStay.club is an invite-only private rental platform. We are committed to using only the cookies that are strictly necessary for the platform to function, or that meaningfully improve your experience. We do not use advertising, behavioural tracking, or analytics cookies.
This policy is provided in accordance with the UK Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.
2. Who We Are
- Company name
- IDL HUB Ltd.
- Platform
- PrivateStay.club
- Contact
- hello@profitabletalents.com
For any cookies-related queries or to exercise your data rights, please contact us at the email address above.
3. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you don't have to re-enter them every time you visit.
- Session cookies — deleted automatically when you close your browser.
- Persistent cookies — remain on your device for a defined period, or until you delete them.
- First-party cookies — set by the website you are visiting (in this case, PrivateStay.club).
- Third-party cookies — set by a different domain to the one you are visiting.
All cookies we use are first-party cookies. We do not allow third parties to set cookies on your device through our platform.
4. Cookies We Use
We use two categories of cookies. The table below sets out each cookie, its purpose, how long it lasts, and its legal category under PECR.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
sb-*(Supabase session cookies) | Authentication — keeps you securely logged in to your PrivateStay.club account | Session / rolling (managed automatically) | Strictly Necessary |
ps_active_property(active property preference) | Remembers which property is currently active for property owners who manage more than one listing. Without this cookie, owners with multiple properties would need to re-select their active property on every page load. | 30 days (persistent) | Strictly Necessary |
NEXT_LOCALE(language preference) | Remembers the display language you actively select using the language switcher, so the interface stays in your chosen language. It is set only when you choose a language yourself, and stores nothing more than the language code (e.g. “en”, “fr”). It contains no personal data. | 1 year (persistent) | Functional |
Total: 3 cookie types. We do not use any advertising, tracking, analytics, or social media cookies.
If you are signed in, your language choice is also saved to your account profile on our server so that it follows you across devices. The NEXT_LOCALE cookie allows your choice to work immediately, including before you sign in.
5. Cookie Categories Explained
5.1 Strictly Necessary Cookies
These cookies are essential for you to be able to use the platform and its features. Without them, services that you have asked for — such as staying logged in to your account — cannot be provided. Strictly necessary cookies do not require your consent under PECR.
The sb-* Supabase session cookies fall into this category. They are set by our authentication provider (Supabase) and are required to maintain your secure login session. They use HTTP-only flags, which means they cannot be accessed by client-side scripts, providing an additional layer of security.
The ps_active_property cookie also falls into this category. It is a first-party cookie set by PrivateStay.club to remember the active property for owners who manage more than one listing. It is a persistent cookie with a 30-day lifespan. Without it, the platform cannot correctly scope property-specific data (such as bookings, messages, and analytics) for owners with multiple properties. This cookie does not contain any personal data — only a property identifier.
5.2 Functional (Preference) Cookies
The NEXT_LOCALE cookie is a first-party functional cookie that remembers the display language you have chosen. It is set only as a direct result of your own explicit action — selecting a language from the language switcher — and is used solely to deliver that preference back to you. It stores nothing but a two-letter language code and contains no personal data.
Because this cookie is set exclusively in response to a choice you actively make, in order to provide a feature you have requested (viewing the platform in your chosen language), it falls within the recognised exemption for user-interface customisation cookies and does not require a separate consent banner. You can remove it at any time through your browser settings (see Section 8.2); the platform will simply revert to your browser or account language on your next visit.
We do not use any advertising, analytics, session-recording, or tracking cookies of any kind.
6. What We Do Not Use
We want to be clear about what is absent from PrivateStay.club. We do not use:
- Google Analytics or any other web analytics platform
- Facebook Pixel, LinkedIn Insight Tag, or any advertising network pixel
- Hotjar, PostHog, FullStory, or any session recording or heatmapping tool
- Any social media login or sharing buttons that set third-party cookies
- Any behavioural advertising or retargeting technology
- Device fingerprinting techniques
We do collect limited, privacy-safe, first-party analytics (for example, property page view counts) without using cookies. Where an IP address is involved in this process, it is immediately hashed using SHA-256 and truncated — the raw IP address is never stored.
7. Third-Party Services and Data Processors
Although we do not allow third parties to set cookies on your device through our platform, we do use third-party services to operate PrivateStay.club. These services act as our data processors under UK GDPR — they process data only on our behalf and in accordance with our instructions.
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database & authentication hosting | All user account data, stored in their PostgreSQL cloud | United States |
| Stripe | Payment processing | Email address and user ID only — card data never touches our servers | United States |
| Resend | Transactional email delivery | Name, email address, and message content | United States |
| Cloudflare (R2) | Storage of photos you attach to in-platform messages | Image files you upload to a conversation | United States / global edge network |
| Mapbox | Interactive property maps | Display coordinates only (not full property address) | United States |
| DeepL | Property description and message translation | Only the text you ask us to translate | Germany |
| Giphy | GIF search and delivery in messaging | Your GIF search terms (sent from our server); GIFs you select are then loaded in-browser from Giphy’s network | United States |
| Upstash | Rate limiting and abuse prevention | Short-lived counters keyed to a user or hashed IP; deleted automatically within minutes | United States / global edge network |
| Vercel | Website hosting & content delivery | Standard web server request logs | United States |
All US-based processors are subject to appropriate data transfer safeguards as required under UK GDPR (including, where applicable, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses). DeepL is based in Germany and operates within the UK GDPR equivalent framework.
8. Your Cookie Choices
8.1 No Consent Banner Required
No cookie consent banner is displayed on PrivateStay.club. Our strictly necessary cookies are exempt from the PECR consent requirement because they are essential for the platform to operate. Our single functional cookie (NEXT_LOCALE) is set only in direct response to your own choice of display language, in order to provide that feature back to you, and so falls within the recognised exemption for user-interface customisation cookies. We set no advertising, analytics, or tracking cookies — the categories for which consent would otherwise be required.
8.2 Managing Cookies Through Your Browser
All major browsers allow you to view, manage, and delete cookies stored on your device:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Apple Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
Please be aware that deleting or blocking strictly necessary cookies (the sb-* session cookies) will prevent you from logging in to PrivateStay.club.
8.4 Do Not Track
Some browsers include a “Do Not Track” (DNT) feature. Because we do not engage in behavioural tracking at all, our response to DNT signals does not materially differ from our standard operation.
9. Legal Basis for Processing
Our use of cookies is governed by the following legal bases:
- Strictly necessary cookies: No consent required. Processing is necessary to provide the service you have requested (Article 6(1)(b) UK GDPR and the PECR strictly necessary exemption).
10. How Long We Keep Cookie Data
We retain cookie data only for as long as necessary:
sb-*session cookies: For the duration of your session (or a rolling period as managed by Supabase's authentication system). These are deleted when you log out or your session expires.ps_active_property: Persists for 30 days from the time it is set. It is refreshed automatically when you use the platform. You can clear it at any time by deleting cookies for privatestay.club in your browser settings.NEXT_LOCALE: Persists for up to 1 year from the time you select a language. You can clear it at any time by deleting cookies for privatestay.club in your browser settings.
11. Your Data Rights Under UK GDPR
As a UK resident (or where UK GDPR applies to our processing of your data), you have the following rights:
- Right of access: To request a copy of the personal data we hold about you.
- Right to rectification: To have inaccurate personal data corrected.
- Right to erasure: To request deletion of your personal data. You can delete your account directly from your account page (Subscription & Billing → Delete account). Deletion is immediate and permanent — it removes all associated data. If you are unable to use the self-serve option, contact us at hello@profitabletalents.com and we will process your request promptly.
- Right to restriction: To request that we restrict the processing of your personal data in certain circumstances.
- Right to object: To object to processing based on our legitimate interests.
- Right to withdraw consent: Where processing is based on consent (e.g. functional cookies), you may withdraw your consent at any time without affecting the lawfulness of prior processing.
- Right to data portability: To receive your personal data in a structured, commonly used and machine-readable format. You can download your data yourself at any time from your account page (Account → Your data → Download my data), which produces a machine-readable JSON export. If you need it in a different format or are unable to use the self-serve option, contact us and we will fulfil your request manually.
To exercise any of these rights, please contact us at hello@profitabletalents.com. We will respond within one calendar month as required by UK GDPR.
If you are unhappy with how we have handled your data or a request you have made, you have the right to lodge a complaint with the UK's data protection supervisory authority:
12. Changes to This Policy
We may update this Cookies Policy from time to time — for example, if we introduce new cookies, change third-party processors, or if there are changes in applicable law. When we make significant changes, we will update the “Last updated” date at the top of this document and, where appropriate, notify you via the platform or by email.
We encourage you to review this policy periodically to stay informed about how we use cookies.
13. Contact Us
- Company
- IDL HUB Ltd.
- Platform
- PrivateStay.club