Legal
Cookie policy
Last updated: 5 July 2026
This policy explains what cookies and similar technologies the Futsy web app and website use, and why. It supplements our Privacy Policy, which covers everything we do with personal information.
The short version: we use essential cookies only. There are no advertising cookies, no third-party analytics cookies, and no cross-site tracking on Futsy. That is why you don't see a cookie consent banner when you visit — there is nothing optional to consent to.
1. What cookies are
Cookies are small text files a website stores in your browser so it can remember things between pages and visits — most importantly, that you are signed in. "Similar technologies" includes browser local storage and session storage, which work like cookies but are read by the page rather than sent with every request. This policy covers all of them.
2. The cookies we use
Every cookie Futsy sets is strictly necessary — the app cannot function without it:
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
Authentication tokens (sb-*) |
Futsy (via Supabase Auth) | Keeps you signed in after you click your magic link; identifies your session securely | Session token: ~1 hour, silently renewed; sign-in persists until you sign out or we revoke the session |
| Session security | Futsy | Protects sign-in and forms against cross-site request forgery | Session |
| Hosting cookies | Vercel (our hosting provider) | Routing and load balancing of requests to our servers | Session |
We also use browser local storage to remember interface state on your own device (for example, which league or view you last had open). This data stays in your browser, is not transmitted to us as tracking, and you can clear it at any time through your browser settings.
Authentication cookies are set only after you sign in. If you just visit the Futsy website without an account, we set no identifying cookies at all.
3. What we deliberately don't use
So there's no ambiguity:
- No advertising or retargeting cookies. No Google Ads, no Meta/Facebook pixel, no ad networks of any kind.
- No third-party analytics cookies. We do not use Google Analytics or similar services. Product usage is measured through first-party analytics events recorded in our own database against your account (for example, "user RSVP'd to a fixture"). This involves no cookies beyond the authentication cookie you already have, and none of it is shared with analytics companies. How we use and retain this data is covered in the Privacy Policy (Sections 1, 2 and 5).
- No cross-site tracking or fingerprinting. We don't follow you around the internet, and we don't try to identify you by your device characteristics.
- No social media widgets that set their own cookies on our pages.
One clarification on third parties: our error-monitoring provider (Sentry) receives diagnostic reports when the app errors, as described in the Privacy Policy. This works through our code, not through Sentry cookies placed in your browser for tracking.
4. Your choices
Because everything we set is strictly necessary, blocking our cookies means the app simply can't keep you signed in — but the choice is yours:
- Browser controls: every major browser lets you view, block and delete cookies (usually under Settings → Privacy). Deleting Futsy's cookies signs you out; nothing worse happens.
- Signing out clears your authentication session.
- "Do Not Track" / Global Privacy Control: we don't track you across sites regardless, so these signals require no change in our behaviour — you already have what they ask for.
5. Legal basis and consent
Under Australian law (Privacy Act 1988 (Cth)), cookie data that identifies you is personal information and is handled under our Privacy Policy. For EU/UK users, the ePrivacy rules exempt strictly necessary cookies from consent requirements — which is the only category we use. Our legal basis for the associated processing is performance of our contract with you (keeping you signed in to the service you're using) and our legitimate interest in securing it.
6. If this ever changes
If we ever introduce a non-essential cookie — for example, a third-party analytics tool — we will update this policy before deploying it, list the new cookie in the table above, and ask for your consent through an in-app prompt before it is set. Non-essential cookies will never appear on Futsy silently.
Questions: privacy@futsy.com.au — complaint and OAIC escalation pathways are in the Privacy Policy, Section 9.