Last updated: September 26, 2026
This policy explains what information Cubbie Club collects, how we use it, and the choices you have. We keep it as plain as we can. It is part of our Terms of Service.
Cubbie Club, LLC, a South Carolina limited liability company ("Cubbie Club," "we," "us"), operates thecubbieclub.com, a website that helps parents, grandparents, and caregivers discover offers from third-party kids' and baby brands, and a creator program for people who promote it. This policy applies to our website, creator portal, emails, and related services. Cubbie Club is based in the United States. If you use the service from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.
Account information - when you create an account we collect your first name, email address, and a password (passwords are handled by our authentication provider, Supabase, and are never stored by us in readable form). If you sign in with Google, we receive your name, email, and profile image from Google, and we use them only to create and sign you in to your account.
Referral information - if you arrive through a creator's link or enter a referral code, we record which creator referred you so we can credit them.
Activity - the offers you view and unlock, and outbound clicks to brand sites, so we can deliver rewards and measure what's useful.
Creator information - if you apply to the creator program we collect your name, email, social handles and links, profile photo and bio, and the content you choose to share. Payment, identity, and tax details are collected by Stripe under its own privacy policy; we receive your onboarding status and the information needed to pay you and meet tax-reporting obligations.
Brand partner information - business contact details submitted through our partner form.
Support and correspondence - messages you send us.
Automatically collected - like most websites, our hosting provider (Vercel) and our authentication and database provider (Supabase) process technical data such as your IP address, browser type, and device information to keep the service running and secure.
Bot protection - to protect sign-up and login from bots and abuse, we use Cloudflare Turnstile. When you sign in or create an account, Turnstile runs a security check that may collect device, browser, and network signals (including your IP address) to tell humans from automated traffic. Cloudflare processes this data as our processor under the Cloudflare Turnstile Privacy Addendum. Turnstile does not use this information to serve advertising.
Analytics - we use analytics tools to understand how the site is used - pages viewed, sign-up and redemption steps, and general usage - so we can fix problems and improve the experience. We use PostHog, a product-analytics tool that runs without cookies, and Google Analytics, which sets cookies to measure visits across pages and sessions. Google processes the data it collects in accordance with its own privacy policy.
We use a small number of cookies and identifiers:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Session cookie | Cubbie Club / Supabase | Keeps you logged in | Session |
| Referral cookie | Cubbie Club | Attributes your visit to the creator who sent you | Up to 30 days |
| _ga and related | Google Analytics | Measures visits across pages and sessions | Up to 2 years |
| Anonymous identifier (local storage) | PostHog | Product analytics without cookies | Until cleared |
Cookies needed to keep the site secure and working are always on. Analytics cookies and identifiers are set only after you accept them in our cookie banner, and never before. You can change your choice at any time using the “Cookie settings” link in the footer, and we honor Global Privacy Control browser signals as an opt-out. You can also block or clear cookies in your browser settings, or opt out of Google Analytics specifically using Google's Analytics opt-out browser add-on.
To create and manage your account; to deliver the rewards you unlock and email you a copy; to attribute referrals and calculate creator payouts; to send you service-related messages; to send marketing emails if you have opted in (you can unsubscribe at any time); to prevent fraud and abuse; to comply with legal obligations; and to understand and improve the service.
Where the GDPR or UK GDPR applies to you, we rely on: performance of our contract with you (account, rewards, creator payouts); our legitimate interests (security, fraud prevention, improving the service); your consent (analytics cookies, marketing emails); and legal obligations (tax and record-keeping).
When you click through to a brand, we may attach an anonymous tracking identifier to the link so that, if you make a purchase, the brand's affiliate network can report the sale back to us. We pass this identifier - not your name, email, or account details - to brands and their affiliate networks for this purpose. If a brand is a Cubbie Club partner using our Shopify app, we receive order confirmation and new-customer status from the brand to confirm the referral, and we use that information only for attribution and billing.
We do not sell your personal information. We share it with service providers that process it for us under contract: Supabase (authentication and database), Vercel (hosting), Cloudflare (Turnstile bot protection), Stripe (creator payouts and brand billing), Resend (email delivery), PostHog and Google (analytics), and affiliate networks and brands (the anonymous click identifier only). We may disclose information if required by law, to protect our rights and users, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.
We do not sell your personal information. Under some U.S. state laws, allowing Google Analytics to set cookies on our site can be considered "sharing" personal information for cross-context behavioral advertising. We do not use analytics data to serve targeted ads. You can opt out of any such sharing through our cookie banner or the “Cookie settings” link in the footer, and we honor Global Privacy Control browser signals as an opt-out. You can also block or clear cookies in your browser or install Google's Analytics opt-out browser add-on.
We keep account information while your account is active and for up to 12 months after it is closed, unless a longer period is required. We keep creator payout and tax records for 7 years as tax law requires. We keep referral and attribution logs for up to 24 months. Analytics data is retained according to our analytics providers' settings (Google Analytics: 14 months). We may keep information longer where needed to resolve disputes, enforce our agreements, or comply with legal obligations.
Depending on where you live, you may have the right to: access the personal information we hold about you; correct it; delete it; receive a copy in a portable format; opt out of the sale or sharing of personal information and of targeted advertising; restrict or object to certain processing; and not be discriminated against for exercising these rights.
To exercise any of these rights, email privacy@thecubbieclub.com from the address on your account or use your account settings. We will verify your identity, respond within 45 days (extendable once where permitted by law), and if we decline a request you may appeal by replying to our response. Where the GDPR applies you may also complain to your local supervisory authority. You can unsubscribe from marketing emails using the link in any email; we will still send service messages about your account.
Cubbie Club is intended for adults (parents, grandparents, and caregivers) aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it. Creators are responsible for obtaining consent before sharing content that shows children.
We use reputable providers and reasonable safeguards to protect your information, including encryption in transit, access controls, and provider-level security certifications. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it. If a security incident affects your personal information we will notify you and any regulator as required by law.
We may update this policy from time to time. Each version shows its "Last updated" date, and prior versions are available on request. If we make a material change, we will notify registered users by email at least 14 days before it takes effect. Changes are not retroactive.
Questions about privacy? Email privacy@thecubbieclub.com or write to Cubbie Club, LLC, 78 Folly Road, Ste B9 #1200, Charleston, SC 29407.