Cookie Notice

1. Cookies and similar technologies

Cookies are small values stored by your browser and sent with relevant website requests. Local storage keeps information in your browser until it is cleared by the site or you. These technologies can support sign-in, application state, preferences, security, and service operation. The Privacy Policy describes the broader handling of information.

2. Sign-in and essential functions

MERCHED uses a first-party session cookie named graced-golf-session to recognize an authenticated account and enforce workspace access. The application configures it for a maximum age of 12 hours. It is marked HttpOnly and SameSite=Lax, with Secure enabled in production. Signing out clears the application session cookie.

Authentication or infrastructure providers may also use storage needed for their own authentication, payment, security, or delivery functions when those features are used. Provider technologies can differ between public browsing, sign-in, and payment flows.

3. Local application storage

Certain application modes store workspace state, drafts, or preferences in your browser. Current examples include graced-golf-app-data for locally stored application data and administrative preferences or draft messages. This storage can contain business information; it is not limited to anonymous settings. Older versions may leave legacy keys until migrated or cleared.

Local storage generally has no automatic expiration and remains until the application or the browser clears it. Use a trusted device, sign out when appropriate, and avoid leaving confidential workspace data accessible on shared devices. Clearing browser data can remove local drafts or state. The public guided walkthrough keeps its example edits in page memory rather than saving them to a club account.

4. Diagnostics and third-party requests

MERCHED uses hosting logs and, when configured, Sentry error/performance monitoring to diagnose failures, investigate security issues, and maintain reliability. These services can receive technical data such as request information, browser details, and diagnostic events; not all technical collection relies on cookies.

Payment, meeting, and external brand-image services can also receive technical information when your browser interacts with them. Their own notices describe technologies used on their sites. The current MERCHED first-party website does not include advertising-pixel or cross-site advertising-tracker integrations. This does not mean that every third-party service is cookie-free.

5. Your controls and browser signals

You can review, restrict, or clear cookies and site storage through your browser settings. Blocking necessary storage may prevent sign-in or other requested features. Clearing storage does not cancel a subscription or request deletion of records held by MERCHED or a provider.

MERCHED does not currently change its first-party website behavior in response to the browser Do Not Track header. Do Not Track is distinct from legally recognized opt-out preference signals. Any rights and obligations concerning such signals depend on applicable law and the processing involved; contact us with a privacy request.

If we introduce optional technologies that require consent, we will provide the disclosures and controls required by applicable law. This notice itself is not a consent mechanism.

6. Updates and questions

Cookie names and provider technologies may change as the service develops. We will update this notice when practices materially change and provide additional notice where required.

Contact contact@merchedgolf.com with questions about cookies, browser storage, or technical data collection.