Last updated 22 October 2026
Cookie Policy
Goalpost Games currently uses first-party storage to provide requested game, room, and account features. It does not currently load AdSense advertising code or set advertising cookies.
What cookies are
Cookies are small values a website asks your browser to retain and return with later requests. Similar technologies, including local storage, can retain information in your browser without sending it with every request. UK rules refer to both as storage and access technologies.
Essential authentication cookies
| Cookie | Purpose | Duration |
|---|---|---|
goalpost.session_token | Keeps an optional Goalpost account signed in using an opaque identifier. In production, the browser may show a __Secure- prefix. | Up to 30 days of inactivity, unless you sign out or revoke the session sooner. |
goalpost.* temporary sign-in cookies | Protect Google sign-in, preserve the requested return page, and verify the OAuth response. These are used only during a sign-in attempt. | Short-lived and removed or expired after the sign-in flow. |
These cookies are strictly necessary when you choose account or Google sign-in features. They are not used for advertising, and consent is not requested for them because the requested service cannot work without them. Core guest games remain available without signing in.
Local browser storage
| Category | What it holds | How long it remains |
|---|---|---|
| Daily games | Current-device progress, scorecards, and streaks. | Progress is replaced by later games; streak records remain until replaced or browser data is cleared. |
| Local matches | The current Football 501 or Starting Ten match so an accidental refresh does not lose it. | Until the match is reset or browser data is cleared. |
| Private online rooms | A participant identifier and secret reconnect token for a room you joined. | Until the browser detects that the room has expired and removes it, or browser data is cleared. Room credentials may remain on an abandoned browser after the server-side room is automatically deleted at 24 hours. |
| Legacy import safeguards | A random browser identifier and completed-import markers prevent the same guest progress from being repeatedly imported. | Until browser data is cleared. They contain no Google profile data, answers, or scores. |
| Signed-in status cache | A short per-account cache of daily catalog status prevents unnecessary repeat requests. | Until replaced, you sign out from the account page, delete the account, or clear browser data. |
This storage supports game continuity, room reconnection, and requested account features. It is not read across other websites and is not used to build an advertising profile.
Analytics
Cloudflare provides aggregate traffic, security, and performance analytics. Where enabled, Cloudflare Web Analytics uses a lightweight beacon that Cloudflare describes as cookie-free: it does not store client-side identifiers or track visitors across sites. Goalpost's first-party product events contain an allowlisted event name, page category, game, and surface; they do not include account IDs, email addresses, room codes, answers, IP addresses, or advertising identifiers.
Advertising and future consent
If advertising is introduced, this policy and the Privacy Notice will be updated before advertising storage is enabled. Visitors in the UK, EEA, and Switzerland will receive an appropriate Google-certified consent platform with equally accessible accept, reject, and preference controls. Non-essential advertising technology will not load before the required choice, and a persistent footer control will allow that choice to be changed or withdrawn.
Managing storage
You can sign out or revoke account sessions from the account page. Browser settings can display or delete cookies and local storage for goalpost.games, but clearing essential storage can sign you out, remove guest progress, or prevent reconnection to an active room.
Contact
Questions about this policy can be sent to support@goalpost.games. Controller details are provided in the Privacy Notice.