Cookies and local data

Necessary login

When you log in, UGCHub communicates with Supabase to manage your account and session. The HttpOnly cookies cove_access (usually about one hour) and cove_refresh (up to 30 days) keep the session active. They are removed when you log out. In production they are set as Secure and SameSite=Lax.

Your saved choice

cove_privacy_v1 stores your media choice, version and timestamp in your browser's local storage. The choice is respected for up to 180 days. You can decline external media at any time via “Cookie settings”. Players that have already loaded are then removed from UGCHub; future YouTube requests are blocked. Data already transmitted to Google cannot be recalled as a result.

External media: YouTube / Google

Only with your consent does UGCHub load thumbnails from i.ytimg.com and, on click, video players from youtube-nocookie.com. In this case, IP address, browser information and usage data, among other things, may be transmitted to Google / YouTube, and cookies or similar storage technologies may be used. Google may also use data for its own purposes; processing outside the EU is possible.

Without consent, the external thumbnails and players remain blocked. A direct link to YouTube only takes you to YouTube when you open it yourself. More information: Google privacy policy ↗

WhatsApp support

The support button does not load any WhatsApp scripts or Meta trackers into UGCHub. Only when you click “Continue to WhatsApp” do you open an external chat via wa.me. WhatsApp belongs to Meta; its own privacy terms apply there. Messages are only sent when you send them yourself in WhatsApp.

Local demo data and hosting

Demo features you start yourself store bookings, job applications, example fees, reviews of submissions, support tickets and mutual demo ratings in your browser (ugc_mvp_bookings_v1, ugc_mvp_applications_v1, cove_prices_v1, cove_reviews_v1, cove_tickets_v1, cove_fairscore_v1). The demo does not send this content to a support team or other users. Please do not enter sensitive information. The data remains in your browser until you delete the website data.

UGCHub is hosted on Vercel; technical connection and server logs may be processed to provide the service. The app contains no analytics or advertising trackers. The typeface is loaded from our own server, without any request to Google Fonts.