Cookie Policy
Last updated: 13 June 2026
This Cookie Policy forms part of the Camps PH Privacy Policy and the Data Protection & Your Rights page. It should be read alongside those documents for a complete picture of how Camps PH processes your personal information. Our use of cookies is governed by Republic Act No. 10173 (Data Privacy Act of 2012) and NPC Circular No. 2023-04 (Guidelines on Consent).
1. What Are Cookies?
Cookies are small text files that a website places on your device (computer, tablet, or smartphone) when you visit. They are widely used to make websites work correctly or more efficiently, to remember your preferences, and to give site operators useful information about how their services are used.
Session cookies exist only while your browser is open and are deleted automatically when you close it. They keep you logged in as you navigate between pages.
Persistent cookies remain on your device after your browser is closed, for a period defined by the cookie's expiry date. They remember preferences and consent choices across visits.
First-party cookies are set by Camps PH directly. Third-party cookies are set by services we embed, such as Clerk for authentication or Mapbox for interactive maps.
Similar Technologies
In addition to cookies, Camps PH may use:
- Local storage — browser-side storage used to cache map tiles and search results for performance. Unlike cookies, local storage is not sent to the server with every request.
- Pixel tags (web beacons) — tiny transparent images that may be used in transactional emails to confirm delivery or opening of a message.
- Device signals — general device attributes (browser type, screen resolution, language setting) collected server-side for fraud detection and platform optimisation. We do not perform invasive device fingerprinting.
2. Why We Use Cookies
We use cookies and similar technologies for the following purposes:
- Authentication and security: Keeping you securely signed in, protecting against cross-site request forgery (CSRF), and detecting suspicious login activity via Clerk.
- Booking flow continuity: Remembering the campsite, dates, and guest count you selected as you navigate the booking steps.
- Preferences and personalisation: Storing your display settings, recently viewed campsites, and map interaction preferences.
- Analytics and platform improvement: Aggregating usage data (pages visited, navigation paths, errors encountered) so we can measure and improve performance.
- Map rendering: Mapbox uses cookies and local storage to cache map tiles and record interaction data used to improve map quality.
- Payment session continuity: Our payment processors may set session cookies during checkout to maintain a secure payment context and assist in fraud prevention.
- Consent record-keeping: Storing your cookie consent choices (including the date, version of this policy, and categories accepted) so we can demonstrate compliance with NPC requirements.
Camps PH does not currently use advertising or marketing cookies. If this changes, we will update this policy, notify you through the cookie consent banner, and seek fresh consent before any marketing cookies are placed.
3. Cookie Categories and Inventory
The table below lists the categories of cookies we use, example cookie names within each category, the provider, the purpose, the typical retention duration, and whether your consent is required before the cookie is set. Consent is collected through our cookie banner on your first visit (or after clearing your preferences).
3.1 Strictly Necessary
These cookies are essential for the Platform to function and cannot be disabled through our consent mechanism. Under NPC Circular No. 2023-04, strictly necessary cookies are exempt from the consent requirement because they are indispensable to a service explicitly requested by you. You may block them at the browser level, but doing so will prevent login and booking.
| Cookie / Key | Provider | Purpose | Retention | Consent? |
|---|---|---|---|---|
| __session | Clerk / 1st party | Maintains your authenticated session after login | Session | No |
| __clerk_* | Clerk | Token storage and refresh for Clerk authentication; CSRF protection | Up to 1 year | No |
| cph_consent | 1st party | Records your cookie consent choices, timestamp, and policy version for compliance evidence | 3 years | No |
| __Host-next-auth.* | 1st party | Secure session routing for Next.js server actions | Session | No |
3.2 Functional
Functional cookies enable enhanced features and personalisation. They are not strictly necessary but improve the quality of your experience. These cookies require your consent under NPC Circular No. 2023-04.
| Cookie / Key | Provider | Purpose | Retention | Consent? |
|---|---|---|---|---|
| cph_prefs | 1st party | Stores display settings, preferred map region, and dismissed banner states | 1 year | Yes |
| mapbox_session | Mapbox | Preserves map zoom level, style, and tile cache to avoid re-loading tiles on return visits | 1 year | Yes |
| cph_recent | 1st party | Remembers recently viewed campsite IDs for "Recently Viewed" section | 30 days | Yes |
3.3 Analytics
Analytics cookies help us understand how visitors use the Platform so we can improve it. Data is aggregated and, where possible, anonymised before analysis. These cookies require your consent.
| Cookie / Key | Provider | Purpose | Retention | Consent? |
|---|---|---|---|---|
| cph_analytics | 1st party / Supabase | Tracks page views, navigation paths, error rates, and feature usage to guide product improvements | 1 year | Yes |
| cph_perf | 1st party | Records Core Web Vitals and page load timings for performance monitoring | 1 year | Yes |
3.4 Marketing
Camps PH does not currently use marketing or advertising cookies. This category is documented here for transparency and to set out our commitment: if marketing cookies are added in the future, we will (a) update this policy before deployment, (b) present a refreshed consent banner that clearly identifies the new category, and (c) not set any marketing cookie until you have actively accepted it. Marketing cookies would always require explicit, separate consent.
4. Third-Party Cookie Providers
The following third parties may set cookies or access data stored by cookies when you use the Platform. Each is bound by a data processing agreement with Camps PH and is required to process data only for the purposes described.
Clerk — Authentication Provider (USA)
Clerk provides authentication and user management for the Platform. When you sign in, Clerk sets session tokens and security cookies that are strictly necessary for your login to function. Clerk is a US-based company; personal data processed by Clerk is transferred from the Philippines to the United States under contractual safeguards consistent with NPC Advisory No. 2024-01 (Model Contractual Clauses for Cross-Border Transfers).
Clerk's privacy policy: clerk.com/privacy
Mapbox — Mapping Service (USA)
Mapbox renders the interactive maps on campsite listing and explore pages. When you interact with a map, Mapbox may set functional cookies and use local storage to cache map tiles and record interaction telemetry. This transfer is covered by contractual safeguards consistent with NPC Advisory No. 2024-01.
Mapbox's privacy policy: mapbox.com/legal/privacy
Payment Processors (TBC)
During the checkout flow, our payment processors (to be confirmed upon integration) may set session cookies to maintain a secure payment context and assist in fraud prevention. These cookies are strictly necessary for the payment transaction you have initiated. Payment processors are bound by PCI-DSS requirements and by data processing agreements with Camps PH.
5. Consent Mechanism — Our Cookie Banner
In accordance with NPC Circular No. 2023-04, Camps PH uses a cookie consent banner to obtain your informed, freely given, and specific consent for non-essential cookies before any such cookies are placed on your device.
How the banner works:
- On your first visit (or when this policy is updated materially), the banner appears and presents the available cookie categories clearly before any non-essential cookie is set.
- You can accept all categories, accept only strictly necessary cookies, or customise your choices by category (Functional, Analytics). Pre-ticked boxes are not used.
- Strictly necessary cookies are active regardless of your choice because they are indispensable to the service you have requested.
- Your choices are saved in the
cph_consentcookie (a strictly necessary record) together with a timestamp and the version of this Cookie Policy in force at the time of consent. This record is retained for 3 years as required for compliance evidence. - Bundled consent (a single "Accept All" button that is the only option) is not used; individual category toggles are always available.
6. Withdrawing or Changing Your Consent
Under the Data Privacy Act and NPC Circular No. 2023-04, you have the right to withdraw or modify your cookie consent at any time. Withdrawing consent is as easy as giving it.
Through our Platform: Click the "Cookie Settings" link in the footer of any page to reopen the consent banner and update your choices by category. Changes take effect immediately: non-essential cookies you have deselected will be removed from your browser.
Through your browser: Most browsers allow you to view, block, and delete cookies independently of our banner. Common browser controls:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy
- Edge: Settings → Cookies and site permissions
Effect of withdrawal: Withdrawing consent for functional or analytics cookies does not affect the lawfulness of processing that occurred before withdrawal. Withdrawing consent for strictly necessary cookies is not possible through our banner (only through your browser) and will prevent you from logging in or completing bookings.
Third-party opt-outs: You can also opt out of Mapbox telemetry directly via the Mapbox telemetry opt-out page.
7. Consent Records and Retention
Each time you make a cookie consent choice on Camps PH, we log:
- The date and time of the consent event.
- The version of this Cookie Policy that was in force at the time.
- The categories you accepted, rejected, or customised.
- A pseudonymous session identifier (not your account name or email).
Consent records are retained for 3 years as required under NPC Circular No. 2023-04 to demonstrate that consent was freely given, specific, informed, and unambiguous. These records are not used for any purpose other than compliance evidence.
8. Your Data Subject Rights
To the extent that cookie data constitutes personal information about you under RA 10173, you have the following rights in respect of that data:
- Right to be informed: This Cookie Policy fulfils that right for cookie-based processing.
- Right to access: You may request a copy of data we hold about you, including consent records.
- Right to object: You may withdraw consent for non-essential cookies at any time via the Cookie Settings link (see Section 6).
- Right to erasure: You may request deletion of cookie-derived personal data subject to legal retention requirements.
- Right to file a complaint: If you believe we have mishandled your data, you may lodge a complaint with the National Privacy Commission at privacy.gov.ph.
To exercise any right, visit our Data Protection & Your Rights page or email our Data Protection Officer at [DPO_EMAIL]. We will acknowledge requests within 5 business days and respond substantively within 15 calendar days.
9. Updates to This Cookie Policy
We may update this Cookie Policy when we add or remove cookies, change the purposes for which cookies are used, or in response to changes in Philippine law or NPC guidance. When we do:
- We will update the "Last updated" date at the top of this page.
- For material changes (e.g., adding a new category of non-essential cookies), we will re-present the consent banner so you can review and update your choices before any new cookies are set.
- Logged-in users will receive an in-app notification of material changes on their next visit.
Continued use of the Platform after a non-material update (such as a clarification of existing cookies) does not imply acceptance of any new processing. Only active acceptance through the consent banner constitutes valid consent for new non-essential cookies.
10. Related Policies
This Cookie Policy should be read alongside:
- Privacy Policy — full disclosure of all personal data processing, legal bases, retention periods, sub-processors, and cross-border transfers.
- Data Protection & Your Rights — how to submit a data subject request, DPO contact details, NPC registration number, and our security commitments.
11. Contact Us
For any questions about this Cookie Policy or to exercise your data subject rights in relation to cookie-based processing, please contact our Data Protection Officer:
You may also raise concerns directly with the National Privacy Commission of the Philippines:
National Privacy Commission
Website: www.privacy.gov.ph
Email: complaints@privacy.gov.ph
5th Floor Delegation Building, PICC Complex, Pasay City, Metro Manila