Cookie Notice
What's stored in your browser. No advertising or tracking cookies -- that's the Ad-Free Pledge applied to cookies too.
{{PLACEHOLDER}} marks a fact that has not been decided or does not exist yet. Do not treat this page as legally binding until it has been reviewed by an attorney and republished with a real effective date.1. What this notice covers
This notice explains the cookies and similar browser storage LeagueBucket uses. It's short, because we don't use advertising or cross-site tracking cookies -- that would be inconsistent with the Ad-Free Pledge.
2. Strictly necessary cookies
LeagueBucket uses cookies set by our authentication provider (Supabase Auth, typically prefixed `sb-`) to keep you signed in and to keep your session secure. These are required for the Service to work -- if you're signed in, you have them. There's no way to opt out of these while remaining signed in, since they're how the Service recognizes you.
3. Functional cookies / local storage
{{PLACEHOLDER: once Track A1's light/dark theme preference ships, describe the storage mechanism it actually uses here (cookie vs. localStorage) and whether it's set before or after consent. Not written yet because the feature doesn't exist yet -- describing it now would be a claim ahead of the code, which the plan's honesty rule (§11.3 / voice rules) forbids.}}
4. Analytics cookies, and the one campaign-link cookie
As of {{EFFECTIVE_DATE}}, LeagueBucket does not use any analytics or usage-tracking cookies. If that changes, we will update this notice and, where required by law, ask for your consent before setting them -- before the change ships, not after.
One first-party cookie, `lb_src`, is set only when you arrive through a link that carries campaign tags -- for example one of our own ads, whose address ends in `utm_source=...`. It records those tags, the page you landed on and when, and nothing else. It is kept for 30 days. If you create an account in that time, the same details are saved with your account so we can tell which of our ads and posts actually bring people in, and the cookie is then removed. It is never shared with anyone, it is not a third-party or cross-site cookie, and no advertising network's code runs on LeagueBucket. A visit through an ordinary link sets nothing.
5. Advertising cookies
None. LeagueBucket does not run advertising, on any plan, and does not use advertising or cross-site tracking cookies of any kind. This is the same commitment as section 5 of the Terms, applied specifically to cookies.
6. Third-party cookies
If you pay for a plan, our payment processor Stripe may set its own cookies during checkout as part of fraud prevention. Those are governed by Stripe's own privacy practices, not this notice.
7. Managing cookies
Most browsers let you block or delete cookies through their settings. Blocking the strictly necessary authentication cookies will prevent you from staying signed in to LeagueBucket.
8. Contact
Questions about this notice can be sent to privacy@leaguebucket.com.