Cookies are small text files a website stores in your browser. Websites can also keep small settings on your device without cookies (“local storage”). This policy covers both. FanHubb only uses the ones it needs to work: to sign you in, to get you through the steps of signing in, and to keep payments safe.
Needed to run FanHubb (always on)
- fh_session: keeps you signed in to your FanHubb account. Lasts up to 30 days, or until you sign out.
- PHPSESSID: remembers the steps of signing in (like the two-step code) and holds a security token that stops forged requests. Deleted when you close your browser.
- fh_dev: a random ID for this browser. It helps stop payment fraud and account takeovers, and tells you when your account is used on a new device. It doesn’t contain your name or email. Lasts 5 years.
- fh_privacy: remembers the choices you made in “Your privacy choices”. Lasts a year.
Settings kept on your device
- Small settings in your browser’s local storage, like tips you’ve closed, your privacy choices, and whether you’ve seen the cookie notice. They never leave your device.
- Google reCAPTCHA: only on the sign-up, sign-in and password-reset pages. It checks you’re a person and may set its own cookies to do it. See Google’s Privacy Policy.
- Stripe: when you pay, you go to Stripe’s checkout page, which uses its own cookies to process the payment and prevent fraud. See Stripe’s cookie settings.
Our fonts are served from FanHubb itself, so loading a page doesn’t contact Google or anyone else.
- No advertising or ad-targeting cookies
- No analytics or tracking cookies
- No cross-site tracking
- We don’t sell or share your personal information for advertising
If we ever add an optional cookie (for example, to count visits), it will stay off until you turn it on, you’ll be able to say no as easily as yes, and this page will list it first.
Open Your privacy choices (also at the bottom of every page) to see what’s stored and to record that FanHubb must not sell or share your personal information. If your browser sends a Global Privacy Control signal, we treat it as that request automatically. If you’re signed in, your choice is saved with your account too.
You can also delete cookies in your browser’s settings. Deleting the needed ones signs you out, and you may get a new-device email the next time you sign in.
Questions about this policy?
Choose “Legal” on our Support page. We reply within 3 business days.