Cookie policy.
Last updated: 13 October 2026 Effective from: 13 October 2026
This Cookie Policy explains what cookies and similar technologies we use on BoardMatey, why we use them, and the choices you have. It sits alongside our Privacy Policy and forms part of our Terms of Use.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They let the site remember things between visits — for example, that you're signed in or what theme you've chosen. We also use similar technologies (like localStorage in your browser) which work in much the same way.
2. The cookies we use
BoardMatey uses a small, deliberate set of cookies. We do not use third-party advertising cookies or cross-site tracking pixels.
| Cookie / storage | Purpose | Type | Expires |
|---|---|---|---|
sb-* (Supabase) | Keeps you signed in between visits and refreshes your session securely. | Essential | Session / up to 1 year |
boardmatey-csrf-token | Protects forms and API requests against cross-site request forgery attacks. | Essential | Session |
boardmatey-mfa-trust | Remembers a device you've marked as trusted so we don't ask for MFA every time. | Essential (security) | Up to 30 days |
boardmatey-legal-banner-dismissed:* (localStorage) | Remembers that you've dismissed the in-app notice about an upcoming Terms or Privacy update. | Functional | Until the next update is published |
theme (localStorage) | Remembers your light/dark mode preference. | Functional | Until you clear browser storage |
bm_signup_intent (localStorage) | Remembers the plan or invitation you picked before signing up, so we can take you back to it after you confirm your email. | Functional | Deleted once used. After 7 days we stop using it and delete it on your next visit |
invite_code (localStorage) | Remembers the invite link you arrived from, so the friend who invited you is credited when you sign up. | Functional | Deleted once you've signed up, or until you clear browser storage |
bm_captured_tz (localStorage) | Remembers the time zone we last saved for you, so we only update it when it changes. We use your time zone for quiet hours on notifications. | Functional | Until you clear browser storage |
pending_legal_acceptance (sessionStorage) | Holds your agreement to our Terms and Privacy Policy from the sign-up form until you confirm your email and sign in, so we can record it against your account. | Essential | Deleted once recorded, or when you close the tab |
boardmatey-recent-searches (localStorage) | Remembers your last five searches, so you can run one again from the search box. | Functional | Until you clear browser storage |
rsvp_* (localStorage) | Remembers your answer to a game night invitation, so the notification shows your answer instead of asking again. | Functional | Until you clear browser storage |
groupCollectionView and groupOwnershipFilter (localStorage) | Remember how you last looked at a group's games: as tiles or a list, and owned games or wishlists. | Functional | Until you clear browser storage |
boardmatey:expansion_completeness_threshold (localStorage) | Remembers where you left the slider in Game Finder's expansions check. | Functional | Until you clear browser storage |
pendingToast (sessionStorage) | Holds a short confirmation, such as "Game night scheduled", to show you on the next page. | Functional | Deleted once shown, or when you close the tab |
admin:last-list:* (sessionStorage) | Only for our team in the admin console. Remembers a list's search and page, so "Back" returns to the same place. | Functional | When you close the tab |
We may add or change cookies as the Service evolves. If we ever introduce non-essential cookies (for example, analytics or product-insight cookies), we'll update this Policy and ask for your consent first where required by law.
3. What we don't use
We don't use:
- Third-party advertising or retargeting cookies.
- Cross-site tracking pixels.
- Cookies that build a profile of you for advertisers.
- Fingerprinting techniques.
Paid plans are, and will remain, free of advertising and tracking for ads. See section 7 of our Terms of Use for more detail.
4. Managing cookies
You can control cookies through your browser settings. Most browsers let you:
- See which cookies a site has stored;
- Delete some or all cookies;
- Block cookies from specific sites or all sites; and
- Be warned before a cookie is stored.
Helpful guides:
If you block our essential cookies, parts of BoardMatey — including signing in — may not work.
5. Do Not Track and Global Privacy Control
Because we don't run cross-site tracking, we treat Do Not Track (DNT) and Global Privacy Control (GPC) signals as automatically respected: there's nothing for us to turn off. If we ever introduce optional analytics or marketing tracking, we'll honour GPC signals at the browser level.
6. Changes to this Policy
We may update this Policy as our cookie use changes. The "Last updated" date at the top tells you when we last changed it, and we keep a record of every version.
For a minor change — fixing a typo or clarifying wording — we may update the Policy without telling you in advance. For a change that affects the choices you have (for example, if we introduce non-essential cookies such as analytics or product-insight cookies), we'll flag it by email or in-app before it takes effect, and we'll ask for your consent first where the law requires it. We won't stop you using the Service over a change to this Policy — but if you're not happy with a change, you can adjust your cookie choices as described in section 4 or stop using the Service.
7. How to contact us
Questions about cookies? Email support@boardmatey.com.