Cookie Policy
IDL HUB Ltd. · Last updated: May 2026 · Version 1.1
1. Introduction
This Cookies Policy explains how IDL HUB Ltd. ("we", "us", or "our"), the company behind PrivateStay.club, uses cookies and similar technologies when you visit or use our platform at privatestay.club.
PrivateStay.club is an invite-only private rental platform. We are committed to using only the cookies that are strictly necessary for the platform to function, or that meaningfully improve your experience. We do not use advertising, behavioural tracking, or analytics cookies.
This policy is provided in accordance with the UK Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.
2. Who We Are
- Company name
- IDL HUB Ltd.
- Platform
- PrivateStay.club
- Contact
- hello@profitabletalents.com
For any cookies-related queries or to exercise your data rights, please contact us at the email address above.
3. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you don't have to re-enter them every time you visit.
- Session cookies — deleted automatically when you close your browser.
- Persistent cookies — remain on your device for a defined period, or until you delete them.
- First-party cookies — set by the website you are visiting (in this case, PrivateStay.club).
- Third-party cookies — set by a different domain to the one you are visiting.
All cookies we use are first-party cookies. We do not allow third parties to set cookies on your device through our platform.
4. Cookies We Use
We use two categories of cookies. The table below sets out each cookie, its purpose, how long it lasts, and its legal category under PECR.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
sb-*(Supabase session cookies) | Authentication — keeps you securely logged in to your PrivateStay.club account | Session / rolling (managed automatically) | Strictly Necessary |
ps_active_property(active property preference) | Remembers which property is currently active for property owners who manage more than one listing. Without this cookie, owners with multiple properties would need to re-select their active property on every page load. | 30 days (persistent) | Strictly Necessary |
Total: 2 cookie types. We do not use any functional, advertising, tracking, analytics, or social media cookies.
Your language preference is stored securely in your account profile on our server — not in a browser cookie.
5. Cookie Categories Explained
5.1 Strictly Necessary Cookies
These cookies are essential for you to be able to use the platform and its features. Without them, services that you have asked for — such as staying logged in to your account — cannot be provided. Strictly necessary cookies do not require your consent under PECR.
The sb-* Supabase session cookies fall into this category. They are set by our authentication provider (Supabase) and are required to maintain your secure login session. They use HTTP-only flags, which means they cannot be accessed by client-side scripts, providing an additional layer of security.
The ps_active_property cookie also falls into this category. It is a first-party cookie set by PrivateStay.club to remember the active property for owners who manage more than one listing. It is a persistent cookie with a 30-day lifespan. Without it, the platform cannot correctly scope property-specific data (such as bookings, messages, and analytics) for owners with multiple properties. This cookie does not contain any personal data — only a property identifier.
We do not use any functional, advertising, analytics, or tracking cookies. Your language preference is saved in your account profile on our servers, not in a cookie, so no consent banner is required.
6. What We Do Not Use
We want to be clear about what is absent from PrivateStay.club. We do not use:
- Google Analytics or any other web analytics platform
- Facebook Pixel, LinkedIn Insight Tag, or any advertising network pixel
- Hotjar, PostHog, FullStory, or any session recording or heatmapping tool
- Any social media login or sharing buttons that set third-party cookies
- Any behavioural advertising or retargeting technology
- Device fingerprinting techniques
We do collect limited, privacy-safe, first-party analytics (for example, property page view counts) without using cookies. Where an IP address is involved in this process, it is immediately hashed using SHA-256 and truncated — the raw IP address is never stored.
7. Third-Party Services and Data Processors
Although we do not allow third parties to set cookies on your device through our platform, we do use third-party services to operate PrivateStay.club. These services act as our data processors under UK GDPR — they process data only on our behalf and in accordance with our instructions.
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database & authentication hosting | All user account data, stored in their PostgreSQL cloud | United States |
| Stripe | Payment processing | Email address and user ID only — card data never touches our servers | United States |
| Resend | Transactional email delivery | Name, email address, and message content | United States |
| Mapbox | Interactive property maps | Display coordinates only (not full property address) | United States |
| DeepL | Property description translation | Property text content only (no personal data) | Germany |
| Vercel | Website hosting & content delivery | Standard web server request logs | United States |
All US-based processors are subject to appropriate data transfer safeguards as required under UK GDPR (including, where applicable, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses). DeepL is based in Germany and operates within the UK GDPR equivalent framework.
8. Your Cookie Choices
8.1 No Consent Banner Required
Because we only use strictly necessary cookies, no cookie consent banner is displayed on PrivateStay.club. Strictly necessary cookies are exempt from the PECR consent requirement as they are essential for the platform to operate.
8.2 Managing Cookies Through Your Browser
All major browsers allow you to view, manage, and delete cookies stored on your device:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Apple Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
Please be aware that deleting or blocking strictly necessary cookies (the sb-* session cookies) will prevent you from logging in to PrivateStay.club.
8.4 Do Not Track
Some browsers include a “Do Not Track” (DNT) feature. Because we do not engage in behavioural tracking at all, our response to DNT signals does not materially differ from our standard operation.
9. Legal Basis for Processing
Our use of cookies is governed by the following legal bases:
- Strictly necessary cookies: No consent required. Processing is necessary to provide the service you have requested (Article 6(1)(b) UK GDPR and the PECR strictly necessary exemption).
10. How Long We Keep Cookie Data
We retain cookie data only for as long as necessary:
sb-*session cookies: For the duration of your session (or a rolling period as managed by Supabase's authentication system). These are deleted when you log out or your session expires.ps_active_property: Persists for 30 days from the time it is set. It is refreshed automatically when you use the platform. You can clear it at any time by deleting cookies for privatestay.club in your browser settings.
11. Your Data Rights Under UK GDPR
As a UK resident (or where UK GDPR applies to our processing of your data), you have the following rights:
- Right of access: To request a copy of the personal data we hold about you.
- Right to rectification: To have inaccurate personal data corrected.
- Right to erasure: To request deletion of your personal data. You can delete your account directly from your account page (Subscription & Billing → Delete account). Deletion is immediate and permanent — it removes all associated data. If you are unable to use the self-serve option, contact us at hello@profitabletalents.com and we will process your request promptly.
- Right to restriction: To request that we restrict the processing of your personal data in certain circumstances.
- Right to object: To object to processing based on our legitimate interests.
- Right to withdraw consent: Where processing is based on consent (e.g. functional cookies), you may withdraw your consent at any time without affecting the lawfulness of prior processing.
- Right to data portability: To receive your personal data in a structured, commonly used and machine-readable format. Note: we do not yet have a self-serve data export feature; please contact us to make this request.
To exercise any of these rights, please contact us at hello@profitabletalents.com. We will respond within one calendar month as required by UK GDPR.
If you are unhappy with how we have handled your data or a request you have made, you have the right to lodge a complaint with the UK's data protection supervisory authority:
12. Changes to This Policy
We may update this Cookies Policy from time to time — for example, if we introduce new cookies, change third-party processors, or if there are changes in applicable law. When we make significant changes, we will update the “Last updated” date at the top of this document and, where appropriate, notify you via the platform or by email.
We encourage you to review this policy periodically to stay informed about how we use cookies.
13. Contact Us
- Company
- IDL HUB Ltd.
- Platform
- PrivateStay.club