Cookie policy
Exactly what Touchline stores in your browser, why, and which of it is optional.
Last updated:
Two categories, one real choice
The cookie banner offers one real choice: whether Google Analytics is allowed to run. Necessary storage below is never optional — Touchline could not function as a signed-in, league-aware product without it, so there is nothing to accept or decline. Withdraw analytics consent any time from "Cookie preferences" in the footer; see our Privacy policy for how that data is used once collected.
Necessary — always active
Stored regardless of your cookie choice, because each one is required for a feature you have directly used.
| Name | Type | Purpose | Duration |
|---|---|---|---|
touchline-consent-v1 | localStorage | Remembers your cookie choice itself. | Until cleared |
| Firebase Auth session | IndexedDB / localStorage | Keeps you signed in across visits. | Until sign-out or cleared |
FPL session cookie (X-FPL-Session) | localStorage, forwarded as a request header | Lets a private league's data load; only present if you pasted one in League settings. Never synced to your account or stored server-side. | Until cleared |
| Draft settings and plans | localStorage | Saved league/entry connections, the waiver-planning list, guest-mode settings. | Until cleared |
| Decision Room cache | IndexedDB | Shows your last-loaded gameweek room instantly on return instead of a blank loading state. | Bounded, self-pruning |
| Paddle checkout session | Cookies set by paddle.com | Required for Paddle's checkout to process a payment. Only set while a checkout is actually open. | Per Paddle's own policy |
Analytics — only after you accept
Nothing in this row is created or sent until you accept analytics in the banner or footer. Declining, or never deciding, means none of this exists in your browser.
| Name | Type | Purpose | Duration |
|---|---|---|---|
touchline-visitor-id-v1 | localStorage | An identifier tying your visits together for the analytics below. | Until cleared |
_ga, _ga_* | Cookies set by Google Analytics (via Firebase) | Measures visits, page views and product interactions. | Up to 2 years, per Google's policy |
Browser controls
You can also block or delete cookies and site storage directly in your browser settings; doing so has the same effect as declining here for anything not required to keep you signed in. This does not remove server-held account or billing records — see the Privacy policy for retention.