Cookie Policy

What we use

We use cookies and similar storage needed for sign-in, account security and basic preferences. Optional affiliate attribution is separate, requires your consent and is not necessary to use the site. We do not use advertising or cross-site profiling cookies.

Optional affiliate attribution

Following a ?ref= link does not itself set a referral cookie. If you choose Allow referral cookie, fa_referral stores an opaque random token for up to 30 days; only its hash is stored server-side. On the published HTTPS site it is HTTP-only, Secure and uses SameSite=Lax. The first unexpired consented referral is retained rather than overwritten by later links. The cookie is scoped to footballapi.net, including an affiliate subdomain if configured.

You can decline without losing access to the site. Use Remove optional referral cookie on this page to withdraw the cookie without signing out. Withdrawal does not erase a referral already attached to a new account or financial records we need to retain. Unclaimed expired token records are periodically removed after an additional 60 days; aggregate consented-click counts are retained for programme reporting.

Sign-in and security

Authentication cookies recognise your session and protect your dashboard. They are set by our sign-in provider and are necessary for the service.

Your preferences

Dismissing the cookie notice stores fa_cookie_ack in local storage so the notice does not reappear. The dashboard may store a sidebar_state cookie for the sidebar position.

Control

You can clear cookies and storage in your browser. Blocking authentication cookies will stop sign-in from working.