Cookie Policy
Last updated September 7, 2026
C-Cab uses one cookie, and it is the one that keeps you signed in. That is the whole story — but here it is in full.
1. The one cookie we set
chariot_session is set when you sign in. It holds a random token that tells our server it is you. It is marked HttpOnly (scripts cannot read it), Secure (sent only over HTTPS) and SameSite=Lax (not sent from other sites), and it expires after 60 days, when you sign out, or when you delete your account.
It is strictly necessary: without it you cannot be signed in. It is not used to track you anywhere.
2. Things stored in your browser that are not cookies
If you dismiss the add-to-home-screen hint, we remember that choice in your browser's local storage so we do not keep asking. Installed as an app, your browser may cache pages for speed. Neither is sent to us or to anyone else.
3. What we do not do — and why there is no cookie banner
No analytics cookies, no advertising cookies, no third-party tracking, no fingerprinting.
Canadian privacy law (PIPEDA and Alberta's PIPA) does not require consent for strictly necessary cookies, and we set no other kind, so a consent banner would only get in your way. If that ever changes we will add a real choice before any such cookie is set, and update this page.
4. Other sites you will touch
Map images load from OpenStreetMap's servers, which see your IP address like any website you visit. Church coordinators paying for membership are taken to Stripe's checkout and billing pages, which set Stripe's own cookies under Stripe's privacy policy.
5. Managing cookies
You can delete cookies in your browser at any time; you will simply need to sign in again. Questions: luke@aimediacorp.net.
V1.1.21