OVALBALL

Legal & Trust

Cookie Policy

This policy explains the cookies and similar browser storage Ovalball uses. It lists what is actually set by the service rather than a generic list of what a website might use.

Effective date
5 September 2026
Last updated
5 September 2026
Version
1.0

What cookies and browser storage are

A cookie is a small file a website stores in your browser and reads back on later requests. Browsers also provide local and session storage, which work similarly but are read by code running in the page rather than sent with every request.

How Ovalball uses them

Ovalball uses them for three things: to keep you signed in, to remember which club or team context you are working in, and to keep a small amount of interface state. All of it is necessary for the service to function as you would expect.

What Ovalball sets

NameTypePurposeCategory
sb-…-auth-tokenCookieKeeps you signed in. Set by our authentication provider when you sign in, and removed when you sign out.Strictly necessary
ovalball_ctxCookieRemembers which club, team or parent context you are currently working in, so the right information loads.Strictly necessary
ovalball-rememberCookieRecords whether you chose "keep me signed in on this device" so your session is kept for longer.Strictly necessary
ovalball-iris-seenSession storageRemembers that the homepage introduction animation has already played, so it does not replay on every page view in the same tab.Functional

Sign-in also briefly involves values used to protect the sign-in exchange itself against interception. These are part of the authentication flow and are not used to track you.

Security check on sign-in and sign-up

The sign-in and sign-up pages run Cloudflare Turnstile, a check that helps confirm a visitor is a person rather than an automated script. It is there to stop automated account creation and to stop someone triggering large numbers of sign-in emails to other people’s addresses.

On those two pages your browser loads a script from challenges.cloudflare.com and makes one verification request to Cloudflare. We have checked what this actually does on Ovalball rather than describing it generally: it sets no cookie on ovalball.co.uk, and stores nothing in this site’s local or session storage. Cloudflare may set its own cookies on its own domain as part of running the check.

It runs only on the sign-in and sign-up pages, not while you are using Ovalball, and it is not used for analytics, advertising or tracking you between sites.

Analytics and advertising

At the date of this policy, Ovalball does not use advertising cookies or behavioural advertising trackers, and does not load any analytics, tracking pixel or marketing script. There is no Google Analytics, no Meta pixel and no comparable third-party tracker on the site. The only third-party request Ovalball makes is the security check described above, and it happens on two pages only.

This is a statement of the current implementation, verified against the application source. If that changes, this policy will be updated first and appropriate consent controls will be added.

Why there is no cookie banner

Because everything above is strictly necessary \u2014 including the security check, which protects the sign-in process itself \u2014 or a minor functional preference, and nothing is used for advertising or cross-site tracking, Ovalball does not show an accept/reject cookie banner. Presenting a consent choice that has no effect would be misleading.

If Ovalball later introduces non-essential technologies, they will not load before consent is given.

Managing cookies

You can clear or block cookies through your browser settings. Blocking the strictly necessary cookies above will prevent you from signing in or will sign you out, because they are how the service knows who you are.

Signing out of Ovalball clears your session cookie.

Changes and contact

Updates to this policy are reflected in the version and dates above. Questions can be sent to Pipaxon Technologies Ltd via the Ovalball support page. The wider explanation of how information is handled is in the Privacy Notice.