# Cookies Policy

_Last updated: September 2026_

This Cookies Policy supplements our [Privacy Policy](/privacy-policy). It describes how this league website (“the Site”), a **Footy League** league site operated by the organisation that runs this league, uses **cookies and similar technologies** in your browser when you browse or sign in.

You will see a **cookie banner** on your first visit. Strictly necessary storage is always on. **Error reporting** and **embedded media** stay off until you choose **Accept all**, **Reject optional**, or save custom preferences. You can change your choice at any time from **Cookie settings** in the site footer.

The Site does **not** load Google Analytics, third-party advertising trackers, or embedded social-feed widgets. Footy League's apex marketing tags do not run on league tenant subdomains.

---

## Strictly necessary / functional browser storage — sign-in, security, and this choice

So you can stay signed in securely, **Supabase Auth** stores **session identifiers** for your account (typically access and refresh credentials) using **browser storage**. Depending on browser and configuration this may involve:

- **HTTP cookies**, and/or  
- **`localStorage`** (or similar persistence APIs),

under keys managed by Supabase libraries.

We also store **your cookie preferences** in `localStorage`, and may store small functional preferences such as colour theme or sidebar layout.

This storage is treated as **functionally essential** so the Site can remember who you are after you authenticate and honour the choice you made in the banner. Blocking or deleting it may **prevent login** until you authenticate again, and may show the banner again.

We do **not** use optional advertising cookies by default because we do **not** run third-party ads through this codebase.

Further detail about **why we process connected personal data**, **processors**, **international transfers**, and **rights** is in our [Privacy Policy](/privacy-policy).

---

## Optional — error reporting (Sentry)

If you allow **error reporting**, the Site may load **Sentry** to send crash and performance information so faults can be fixed. Sentry is **not** loaded unless you consent. You can turn this off later in **Cookie settings**.

---

## Optional — embedded media (YouTube)

If a league publishes video highlights, those players are hosted by **YouTube**. The embed (including the privacy-enhanced `youtube-nocookie.com` player) loads **only after** you allow **embedded media**, or tap **Allow and load** on the video placeholder. YouTube may set its own cookies. You can turn this off later in **Cookie settings**; already-loaded players will stop on the next page view.

---

## Third-party font delivery (stylesheet request)

Our HTML loads **Google Fonts** from **`fonts.googleapis.com`** and **`fonts.gstatic.com`**. Your browser will contact Google’s servers to fetch stylesheet and font resources. Depending on routing, your **IP address** is exposed to Google for that interaction. This is a stylesheet request used to display the Site, not an optional tracker in the banner. Google's processing is governed by Google's own policies — see their privacy disclosures if you wish to understand that layer.

If those domains are replaced with **locally hosted** font files by the league in future, we will revise this subsection accordingly.

---

## Optional media uploads — no extra optional cookies merely for uploads

Managers or administrators uploading **photos** or **badges** send files to **league-hosted HTTPS media** endpoints (we do **not** use Supabase Storage for those files). Successful upload does **not**, by itself, introduce extra marketing cookies documented here; connectivity uses the media hosting configured for this Site.

Refer to our [Privacy Policy](/privacy-policy) for processors.

---

## Managing cookies & storage in your browser

Use **Cookie settings** in the footer to change optional categories. You also remain in control of browser settings. Blocking **all** storage indiscriminately may break authenticated features.

Instructions for common browsers:

- [Mozilla Firefox](https://support.mozilla.org/en-US/kb/Cookies)
- [Google Chrome](https://support.google.com/chrome/answer/95647)
- [Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/microsoft-edge-browsing-data-and-privacy-bb8174ba-9d73-dcf2-information)
- [Apple Safari](https://support.apple.com/en-gb/guide/safari/sfri11471/mac)
- [Opera](https://help.opera.com/en/latest/web-preferences/#cookies)