Cookie policy

Last updated 25 September 2026

A cookie is a small text file that a website stores on your device. It lets the site remember things between page loads, for example that you're signed in. This page also covers the few things our pages keep in your browser's own storage.

Cookies we set

We set four cookies, all needed for the site to work. None of them is used for analytics, advertising or tracking.

Name Purpose Expires
PHPSESSID Keeps you signed in during your visit and shows one-time confirmation messages. When you close your browser or log out
csrf_token Protects forms against cross-site request forgery (CSRF), so another website can't send a form as you. 90 days
remember_me Keeps you signed in on this device. Only set if "Stay logged in" is ticked when you sign in. 90 days after your last visit, or when you log out
oauth_bind Makes sure a sign-in with Apple finishes in the browser that started it. 15 minutes, or when the sign-in finishes

Each of these does something you ask the site to do, so they are strictly necessary. UK law (the Privacy and Electronic Communications Regulations) does not require us to ask for your consent before setting them.

Kept in your browser

Some pages keep small notes in your browser's storage instead of a cookie:

None of this is used for analytics, advertising or tracking.

Card payments

Card payments are taken by Stripe, and the payment form is Stripe's. Stripe sets its own cookies on the payment step to help stop fraud. Stripe's cookie policy explains them.

Technique videos

Clubs can add technique videos from YouTube or Vimeo. YouTube videos play in YouTube's privacy-enhanced mode, and Vimeo videos play with Vimeo's tracking turned off. Both players may still set a few cookies of their own.

What we don't use

If this changes

We'll update this page before we add anything new. If we ever want a cookie the site doesn't need, such as website analytics, we'll ask you first.

Managing cookies

You can block or delete cookies in your browser settings. Blocking ours will stop you signing in, because the site needs them to keep you logged in.