Cookie Policy
Last updated: July 5, 2026
This page explains the cookies and local storage used on VisitSoccer websites, including visit.soccer and its city editions. Cookies that are not strictly necessary are disabled by default — nothing beyond what is needed to serve the page loads until you affirmatively opt in via the consent banner.
You can review or change your choices any time via the link in the footer of every page. Withdrawing is as easy as accepting — no accounts, no forms.
Categories
Strictly Necessary
Required to run the site. Cannot be disabled without breaking core functionality (sign-in, security, language preference).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| vs_consent | VisitSoccer | Stores your consent choice. | 1 year |
| sb-*-auth-token | Supabase | Keeps you signed in. | Session / 1 year |
| NEXT_LOCALE | VisitSoccer | Remembers language (EN / ES). | 1 year |
| cf_clearance / __cf_bm | Cloudflare | Bot protection. | Session / 30 min |
| theme (local storage) | VisitSoccer | Remembers light/dark mode. | Until cleared |
| vs_newsletter_popup_v1 (local storage) | VisitSoccer | Frequency-caps the newsletter popup. | Until cleared |
Functional
Enable additional features you may request — such as loading a Google Maps view of a venue. Off unless you opt in.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| NID / CONSENT | Google Maps | Delivers the embedded map on venue pages. | 6 months / 2 years |
Analytics
Aggregated, non-identifying analytics that tell us which pages people visit and how the product is used. Off unless you opt in.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes unique users. | 2 years |
| _ga_<CONTAINER> | Google Analytics 4 | Session state. | 2 years |
Advertisement
Cookies from Google Ads / DoubleClick that measure the performance of ad campaigns we may run. Off unless you opt in.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google Ads | Conversion tracking. | 90 days |
| IDE | DoubleClick | Ad delivery and measurement. | 13 months |
Third-party cookies may change over time. We run a monthly scan; the list above is refreshed after each scan.
Global Privacy Control (GPC)
Some browsers and browser extensions send a Sec-GPC: 1 header that expresses a universal opt-out of the "sale" or "sharing" of personal information under the CCPA/CPRA. We honor it automatically. When your browser sends this signal, the Advertising category is forced OFF on every request — regardless of what you (or a previous session) picked on the banner. Analytics is not a "sale" under these statutes and continues to follow your explicit choice.
"Do Not Sell or Share My Personal Information"
CCPA §1798.135 requires a one-click opt-out link with that exact label. It lives in the footer of every page. Clicking it immediately flips Advertising to OFF (preserving Analytics as you set it) without reopening the banner. Use if you want to change multiple categories at once instead.
Our record of your choice
When you click a banner button we append a row to our internal consent audit log (append-only, retained up to 5 years). The row stores: your choice per category, whether GPC was active, the region and country the request came from, the schema version of the banner you saw, a coarsened IP address (IPv4 rounded down to a /24 network — the final octet is zeroed; IPv6 truncated to /48), and the user-agent string. If you later delete your account, the row survives with any user linkage removed — that's the standard GDPR Art. 7(1) "we can demonstrate consent" posture, minus the personal handle.
Managing cookies
Use or the same link in the footer to reopen the banner and change categories at any time. You can also clear cookies and local storage from your browser settings; strictly-necessary cookies will be re-created the next time you use the site.
Contact
Questions? support@visitsoccer.com.