ArchitectureSubdomain Plan

Subdomain Plan

Cub Klub follows the canonical Kennis Capital subdomain architecture with additional considerations for child safety and COPPA compliance.

Active Subdomains

SubdomainStatusPurpose
cubklub.comLiveMarketing site
docs.cubklub.comLiveDocumentation wiki (this site)

Planned Subdomains

SubdomainPhasePurpose
app.cubklub.comPhase 1Family platform — activities, tracking, community
cubklubtv.comPhase 3Video content and educational resources
docs.cubklubtv.comPhase 3Documentation for the TV platform
admin.cubklub.comPhase 2Content moderation, family account management
api.cubklub.comPhase 1FastAPI backend on Fly.io
staging.cubklub.comPhase 1Staging environment for QA
api-staging.cubklub.comPhase 1Staging API on Fly.io

DNS Configuration

RecordTargetProxied
cubklub.comcname.vercel-dns.comYes
docs.cubklub.comcname.vercel-dns.comYes
app.cubklub.comcname.vercel-dns.comYes (when live)
api.cubklub.comFly.io anycast IPsNo (Fly manages TLS)

Dual Domain Strategy

Cub Klub operates across two domains:

  • cubklub.com — primary platform for family activities, development tracking, and community features
  • cubklubtv.com — dedicated video and educational content platform (Phase 3)

Both domains share the same Supabase Auth backend and SSO session. A parent logged into app.cubklub.com is automatically authenticated on cubklubtv.com.

Child Safety Considerations

All subdomains serving child-facing content enforce:

  • COPPA compliance — verifiable parental consent before child profile creation
  • Age-gating — parental controls on all child-facing features
  • Content moderation — automated and manual review before publishing
  • Data minimisation — child profiles store only essential data (Tier 3 classification)
  • No third-party tracking — child-facing surfaces block analytics and ad scripts