Cookie Policy
This document is available in English only. The English version is the authoritative text.
1. Why there is no cookie banner
We only set cookies that are strictly necessary to run the site. There is no Google Analytics, no advertising network, no tracking pixel and no third-party profiling here. Under EU and UK rules, consent is not required for strictly necessary cookies — so we do not interrupt you with a banner asking for something we do not need.
If that ever changes — if we add analytics, for example — we will ask for your consent properly before setting anything, and update this page first.
2. What cookies are
A cookie is a small text file a website asks your browser to store and send back on later visits. It is how a site remembers that you are signed in, rather than asking for your password on every page.
Cookies are not inherently invasive. What matters is what they are used for. Ours are used to keep your session alive, to protect the site from attack, and to remember two display preferences. None of them tell us anything about what you do elsewhere on the internet.
3. Cookies we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
at | Access token. Authenticates each request you make while signed in. Hidden from JavaScript and not sent on cross-site navigation. | Strictly necessary | 15 minutes |
rt | Refresh token. Lets your session renew itself so you are not signed out constantly. Also hidden from JavaScript. | Strictly necessary | Until the session expires |
csrf | Cross-site request forgery token. Deliberately readable by JavaScript — that is how the double-submit protection works — and useless to anyone else. | Strictly necessary | Until the session expires |
user_timezone | Your time zone, so kick-off times show in your local time rather than ours. | Functional | Persistent |
color-mode | Whether you chose the light or dark theme. | Functional | Persistent |
The three authentication cookies are marked Secure and SameSite=Strict, meaning they are only sent over HTTPS and are never attached to requests arriving from another site. They are cleared when you sign out.
4. Local storage
We also use your browser's local storage — a similar mechanism to cookies, with one important difference: it is never transmitted to our servers. It stays on your device.
We use it to remember:
- teams and competitions you have favourited;
- leagues you have pinned to the top of a list.
Clearing your browser data removes these. Nothing else is lost — your account is unaffected.
5. Third-party cookies
We currently set no third-party cookies. Images and profile pictures are served from Bunny CDN, which delivers files without setting cookies on your browser.
When subscription checkout goes live, Paddle — our payment provider — will set cookies that are necessary to process your payment securely and prevent fraud, at the point you open the checkout. Those are handled by Paddle under Paddle's own privacy policy, and they are strictly necessary to complete a transaction you have chosen to start. We will update this page when that happens.
6. Managing cookies
You can view, block or delete cookies in your browser settings. Every major browser offers this under privacy or site settings, and all of them let you clear cookies for a single site.
Be aware of the trade-off. If you block the three authentication cookies:
- you will not be able to sign in, or you will be signed out immediately;
- forms that change something will fail, because the CSRF protection cannot work;
- the free and paid features tied to an account will be unavailable.
Blocking only user_timezone and color-mode is harmless — times will display in a default zone and the theme will reset on each visit.
Browsing the site signed out, and reading fixtures, results, standings and the free content, works with cookies blocked entirely.
7. Changes to this policy
If we add, remove or change a cookie, we will update this page and the date at the top of it. If we ever introduce a cookie that is not strictly necessary, we will ask for your consent before setting it.
8. Contact
Questions about cookies or anything else on this page go to support@scorepredicts.com.
See also our Privacy Policy, which covers everything else we do with personal data.