Cookie Notice

1. What cookies are

Cookies are small text files that a website stores in your browser so that the site can recognize you on subsequent visits, remember your preferences, and operate features that span more than one page. Some cookies are set by the site you are visiting ("first-party" cookies) and some are set by third parties whose services the site uses ("third-party" cookies). This notice describes how ShootCorp uses cookies on shootcorp.com and on our customer and vendor portals.

2. How we use cookies

We use a small number of cookies, grouped into two categories: essential and functional. We do not use third-party advertising cookies, we do not embed cross-site tracking pixels, and we do not run a JavaScript analytics product (such as Google Analytics or similar) that profiles you across sessions or sites.

2.1 Essential cookies (first-party)

Essential cookies are required for the Site to function. They are set on our own domain — they are first-party cookies — and include the session cookie our authentication system (Supabase Auth) sets after you sign in, the cookie our request framework uses to protect against cross-site request forgery (CSRF), and the cookie Cloudflare Turnstile sets when verifying that you are not an automated bot on public forms. Without these cookies you would not be able to sign in, submit a form, or stay signed in across pages.

2.2 Functional cookies (first-party)

Functional cookies remember preferences that are not strictly required for the Site to work but that improve your experience. Examples include any language or timezone preference you set, or a flag we use to remember that you have dismissed a particular in-app notice.

3. Third-party services that set cookies

A small number of third-party services we integrate with may set their own cookies on pages where they appear:

• Cloudflare Turnstile — sets a cookie on its challenge frame embedded in our public forms to detect automated bots.
• Stripe — when you reach a Stripe-hosted checkout page during booking, Stripe sets its own cookies on that page for fraud prevention and session continuity.

Each of these providers publishes its own cookie and privacy notice describing exactly what its cookies do.

4. How to control or disable cookies

Modern browsers let you control cookies through your settings. You can block all cookies, allow only first-party cookies, or clear stored cookies. Blocking essential cookies will prevent parts of the Site from working — for example, you will not be able to sign in to the customer or vendor portal, and you may not be able to submit public forms.

5. Do-Not-Track signals

Some browsers send a "Do Not Track" (DNT) signal indicating that the user does not want to be tracked across sites. Because we do not engage in cross-site tracking for behavioral advertising, our behavior does not change based on the DNT signal. Essential and functional cookies described above continue to operate.

6. Changes to this notice; contact

We may update this Cookie Notice from time to time as we add or remove tools. When we make a material change we will update the "Last updated" date above. Questions can be sent to hello@shootcorp.com.