Cookie Policy
This page explains the cookies and similar storage technologies (such as local storage) that this site uses, why we use them, and how you can control non-essential ones. We use cookies in line with the UK Privacy and Electronic Communications Regulations (PECR) and the consent rules introduced by the Data (Use and Access) Act 2025.
How Consent Works
When you first visit the site you see a banner asking whether you consent to non-essential cookies. Strictly necessary cookies — the ones the site cannot work without — are set immediately so you can sign in, complete checkout, and move between pages. Everything else (analytics, advertising, marketing pixels, embedded third-party widgets that drop their own cookies) waits until you click "Accept all" or accept a specific category.
You can change your mind at any time. Use the cookie controls in your browser to clear our consent cookie, then revisit the site to see the banner again. We do not load advertising or analytics cookies for visitors who have not consented.
1. Strictly Necessary
These run regardless of your consent because the site cannot function without them.
cookie_consent — records whether you have accepted or declined non-essential cookies, so we do not show you the banner on every page. Lasts up to one year. First-party.
next-auth.session-token (and related "next-auth.*" cookies) — keep you signed in after you log in, protect login forms against cross-site request forgery, and carry the OAuth state during third-party sign-in flows. Lasts up to 30 days; cleared when you sign out. First-party, HTTP-only.
Tenant context cookie — carries the tenant identity through OAuth round-trips so you land back on the right site after signing in with Google. Short-lived (only present during the OAuth flow). First-party.
2. Functional
These improve your experience but are not strictly required. Set with consent or as a result of a feature you have specifically enabled.
Theme and layout preferences — remember choices like reduced motion or sidebar layout.
Stripe cookies — set during checkout by our payment processor to detect fraud and complete 3-D Secure authentication. Only loaded when you reach the checkout page.
3. Analytics
Loaded only after you accept analytics cookies. We use these to understand which pages players use, where the site is slow, and which features need work. We never use analytics data to identify individual players.
Google Tag Manager and any analytics tags configured by us — typical examples include Google Analytics cookies (_ga, _gid). Lifetimes vary by vendor; the longest is 24 months.
4. Marketing and Advertising
Loaded only after you accept marketing cookies. We use these to measure the effectiveness of our marketing and to show relevant content on third-party sites.
Meta (Facebook) Pixel — _fbp and related cookies, set when you opt in. Used to measure ad performance and reach audiences with similar interests. Lifetime up to 90 days.
TikTok Pixel — _ttp and related cookies, set when you opt in. Same purpose as the Meta pixel.
Other advertising or attribution pixels are added only when we run a specific campaign and are listed here when they are.
5. Third-Party Embeds
Some pages embed widgets from other companies. The third party may set its own cookies; we do not control them and we cannot list every cookie they may use.
Trustpilot — embedded review widget. Sets its own cookies for fraud prevention and to remember your interactions. Loaded only on pages that show the widget.
reCAPTCHA (Google) — bot protection on certain forms. Sets _GRECAPTCHA when active.
Browser-Level Controls
You can also block or clear cookies in your browser. Doing so may sign you out and may break functional features. Most browsers also support a Do Not Track signal — we honour it for analytics and marketing categories where the consent state has not been set.
Questions
If you have questions about cookies on this site, email privacy@footycomps.com. For more on how we handle the data we collect, see our Privacy Policy.