1. Cookies and browser storage
Cookies are small records a website places on your device. Local storage and session storage are similar browser features that hold data for a site. This policy covers all three.
2. What the Portal stores
Three cookies come from the infrastructure the Portal runs on, not from the Branch’s own code. They are listed with the Branch’s own storage so the table shows everything your device receives.
| Storage | Set by | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare | Bot management: tells automated traffic from people, so the Portal can be protected from abuse | 30 minutes |
| session-id | Lovable, the hosting platform | Groups the page views and page-speed readings the platform records in one sitting; see section 4 | 30 minutes |
| __dpl | The hosting platform | Records which release of the Portal served the page, so a page and its files stay on the same version | 24 hours |
| sb-…-auth-token | The Branch (via Supabase) | Keeps a club or match official signed in. Local storage, set only when you sign in | Until you sign out or the session expires |
| west-court-contact | The Branch | Carries the email or phone you proved on the tracking page to the filing form, so an appeal does not ask for it twice | Session storage; discarded when the tab closes |
The Branch’s own code sets no cookies and runs no measurement of its own on the Portal.
3. Strictly necessary storage
The sign-in session is needed for the club portal and the officials’ area; without it you cannot stay signed in. The tracking-page contact is used only in the tab where you entered it.
The bot-management cookie protects the Portal from automated abuse, and the release cookie keeps a page on one version while a new one goes out. Neither is linked to an account or used to build a profile of you.
4. How the Portal is measured
The Portal is built and hosted on Lovable, which adds its own measurement script to every page. It records page views and page-speed readings: how quickly the page appeared, how stable it was while loading, and how quickly it answered a first tap or click. It sets the session-id cookie above, a random reference that expires after thirty minutes and is not linked to any account. The readings go to an address on this domain, which the platform forwards to its analytics provider, Tinybird. The Branch does not operate this measurement.
It is not used for advertising, and it does not follow you to other websites.
If the platform measurement is removed from the Portal, this section will be updated to say so.
5. Advertising
The Portal sets no advertising cookies and builds no advertising profiles. If that ever changes, this policy and any consent controls will be updated first.
6. Why no consent banner is shown
The Branch has considered whether the storage above needs your prior consent under the Data Protection Act, 2019 and has concluded that it does not. The reasons are set out here so the position can be challenged.
- None of it is advertising or profiling technology, and none of it is shared with an advertising network or data broker.
- The cookies are random, unlinked to any account, and expire within thirty minutes, or twenty-four hours for the release cookie, so none can connect two visits.
- The sign-in session and the tracking-page contact exist only to do something you asked for.
- The platform measurement counts pages and page speed at a level that cannot identify a person.
This is the Branch’s position, not a ruling. If you think consent should have been sought, write to info@fkfnairobiwest.ke. You may also complain to the Office of the Data Protection Commissioner.
7. Other sites
The national eFKF platform, the fan site, social networks and payment services set their own storage when you open them. Their own policies explain it.
8. Your choices
- Use your browser settings to inspect, block or delete cookies and site data.
- Sign out on a shared device to end your session and remove its token.
- Blocking cookies refuses the bot-management, release and measurement cookies. The Portal still loads, but its protection against automated abuse is weaker.
- Blocking all site storage stops you staying signed in.
9. Changes and contact
We will update this policy if what the Portal stores changes. Questions go to info@fkfnairobiwest.ke.