Cookie Policy

This Cookie Policy explains how TableTop Prime uses cookies and similar technologies (collectively, “cookies”) to operate the service. Cookies are small text files stored in your browser. We use only the minimum cookies required to keep you signed in, remember your preferences, and collect anonymous usage statistics.

We do not use cookies for advertising, cross-site tracking, or building behavioral profiles. We do not share cookie-derived data with advertisers, data brokers, or social media platforms.

This policy should be read alongside our Privacy Policy, which explains how we handle your personal data more broadly.

1. Cookies we use — summary

Note: the exact Supabase cookie name includes your project reference, e.g.sb-abcdefghijklmnopqrstuvwxyz-auth-token.

2. Essential cookies

These cookies are strictly necessary for the service to function. Without them, you could not sign in, stay signed in between page loads, or use your preferred language and theme. Because they are essential, they cannot be disabled — doing so would break core functionality.

• Supabase session JWT — issued when you sign in. Contains your user ID and a signed token that proves to our API routes that you are authenticated. HttpOnly (not readable by JavaScript), Secure (HTTPS only), SameSite=Lax (prevents most CSRF attacks). Refreshed automatically by the Next.js proxy on every request, so you stay signed in until you explicitly sign out.
• Theme preference — stores light,dark, orsystem. Without it, the site would flicker between themes on each page load.
• UI state — persists your selected language (English or Spanish) and any in-progress tournament context (such as the active event ID) so that navigating away and back does not lose your place.

3. Analytics cookies

We use Vercel Analytics to collect anonymous page-view statistics. This helps us understand which features are used most and where users get stuck, so we can improve the product.

• What is collected: page URL, referrer, country (derived from IP address, then discarded), browser and operating system, and an anonymous session identifier.
• What is NOT collected: your email, name, user ID, IP address (retained), cross-site browsing history, or any data that could identify you personally.
• No advertising: Vercel Analytics does not share data with advertising networks. There are no Google AdSense, Facebook Pixel, or similar trackers on TableTop Prime.

Analytics cookies are not strictly necessary — the site would function without them — but they help us improve the service. If you wish to opt out, you can use a browser extension that blocks analytics scripts (such as uBlock Origin), enable “Do Not Track” in your browser, or use a privacy-focused browser like Brave or Firefox with Strict tracking protection.

4. Managing and deleting cookies

You can view, block, or delete cookies at any time through your browser settings. Here are the relevant settings pages for major browsers:

• Google Chrome — Manage cookies
• Firefox — Enhanced Tracking Protection
• Safari — Manage cookies and website data
• Microsoft Edge — Privacy settings

Note: if you block the Supabase session cookie, you will not be able to sign in. The site's public pages (landing, privacy policy, terms, cookies, and event share pages) will still work without any cookies — they are fully readable without authentication.

5. Third-party cookies

During sign-in with Google, Google may set its own cookies onaccounts.google.comto manage the OAuth flow. These cookies are set by Google directly and are governed by Google's Cookie Policy. TableTop Prime does not control, read, or have access to Google's cookies — they live on Google's domain, not ours.

After Google redirects you back to TableTop Prime, we receive only an authorization code which we exchange for a Supabase session. Google's cookies are not sent to our servers.

6. Changes to this policy

If we add, remove, or change any cookie, we will update this page and revise the “Last updated” date at the top. For material changes (e.g. adding a new analytics cookie), we will notify you by email and require renewed consent where required by law.