Cookie Policy
Last updated: 6 May 2026
What are cookies?
Cookies are small text files stored on your device when you visit a website. They are used to remember preferences, keep you signed in, and protect against certain attacks.
Our approach
We use two categories of cookies:
- Essential cookies are strictly necessary to keep you signed in and protect form submissions. Under the ePrivacy Directive these don't require consent and they're always set.
- Analytics cookies (Google Analytics 4) help us understand how the site is used in aggregate — page views, session length, rough geographic region. These are only set if you click Accept on the cookie banner. Reject (or close it) and Google Analytics is never loaded.
You can change your decision at any time by clicking Cookie Settings in the footer.
We don't set marketing cookies and we don't share data with third-party advertising networks.
Cookies we use
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sb-<project>-auth-token (Supabase) | Keeps you signed in across page loads. Set on login by Supabase Auth and cleared on sign out. | 1 year (refreshed on use) | Essential |
| sb-<project>-auth-token-code-verifier (Supabase) | Used for the secure PKCE step of OAuth login (Discord). Short-lived, only present during the sign-in flow. | Session | Essential |
| bemycoop:cookie-consent-v1 (localStorage) | Stores your choice on the cookie banner so we don't keep asking. Technically localStorage, not a cookie, but listed here for transparency. | Until you clear it | Essential |
| _ga | Google Analytics — distinguishes unique visitors. Only set after you click Accept on the cookie banner. | 2 years | Analytics |
| _ga_<measurement-id> | Google Analytics — maintains session state. Only set after you click Accept on the cookie banner. | 2 years | Analytics |
If you sign in with Discord, the Discord OAuth handshake sets a short-lived state cookie on the discord.com domain. That cookie is set by Discord, not by us, and is governed by their own privacy policy.
Other site storage
The site also uses localStorage on your device for two small things:
- Your cookie-banner choice (so we don't keep asking).
- Whether you've dismissed the “we're young, stick with us” sticky note on the homepage.
localStorage isn't a cookie, isn't sent to our servers, and clearing it just resets these two preferences.
Clearing cookies
You can clear cookies (and localStorage) at any time through your browser's settings. Doing so will sign you out of bemycoop; you'll need to sign in again on your next visit. There is no in-site “clear cookies” button because we only set essential cookies that the site needs to function.
More information
For details on how we handle the data those cookies are tied to, see our Privacy Policy.