Draft. Review before launch.
Cookie policy
Last updated: 25 October 2026
Early Read Club uses a small number of cookies, and only the ones the site needs to work. We don't use advertising, analytics or tracking cookies, and nothing here follows you to other sites.
Strictly necessary only
Every cookie below is strictly necessary: it keeps you signed in, keeps sign-in secure, or carries out something you asked for (like applying an offer code). UK law (the Privacy and Electronic Communications Regulations) lets a site set these without asking first, which is why there is no cookie banner. If we ever add a cookie that isn't strictly necessary, we'll ask for your consent before setting it.
Readers don't need any cookies: applying for a book and using your private reader link work without one.
The cookies we set
| Cookie | Who gets it | What it's for | How long |
|---|---|---|---|
sb-<project-ref>-auth-token | Authors only, when you sign in | Keeps you signed in to your author account. Split into numbered parts (.0, .1) when it is too long for one cookie. Readers never get it. | Until you sign out, or up to 400 days. It is renewed while you use the app. |
sb-<project-ref>-auth-token-code-verifier | Authors only, while signing in | A one-time security check that ties a sign-in link, code or Google sign-in to the browser that asked for it (PKCE). Related parts may end in -flow-…-code-verifier or -flows-code-verifier. | Removed when a Google sign-in completes. After an email link or code it can stay until it expires, up to 400 days. It holds a random value, nothing about you. |
erc_login_email | Authors only, when you ask for a sign-in link | Remembers which email address the sign-in code went to, so the next screen can check the code without putting your email in the web address. | 60 minutes, the same as the code. |
erc_offer | Anyone who opens a link with an offer code, or types a promo code at billing | Remembers the offer code until you sign up or upgrade, so the right price or trial is applied. | 30 days, or until the code is used or removed. |
All of them are first-party: set by our own domain, read only by us, and never shared with advertisers.
No other storage
We don't use local storage, session storage or any other way of keeping data in your browser. When a reader taps through from an author's page, where they came from (for example TikTok) travels in the link itself, not in your browser.
Other sites
When you pay, you go to Stripe's checkout and billing pages, which are run by Stripe under Stripe's own cookie policy. If you choose to sign in with Google, Google's pages set their own cookies. Links to Amazon, Goodreads, TikTok and other sites take you to those sites' own policies.
Turning cookies off
You can block or delete cookies in your browser settings. If you block ours, you won't be able to sign in as an author, but reader pages and links still work.
Questions
Email hello@earlyreadclub.com. Our privacy policy explains how we use personal data.