Cookie and Browser Storage Policy
Last updated: 16 September 2026
How GafferSuite uses browser storage
Cookies are small pieces of information stored by your browser. Local storage is a similar browser feature that lets a website remember information on your device. GafferSuite uses authentication and security technologies and limited functional storage. Affiliate promo codes are entered directly at checkout and are not stored in referral cookies. We do not currently use advertising, profiling, behavioural tracking or analytics cookies.
Current technologies
Swipe horizontally to view every storage detail.
| Technology | Purpose | Classification | Duration |
|---|---|---|---|
| __Secure-authjs.session-token* Cookie · GafferSuite (Auth.js) | Keeps you securely signed in to GafferSuite. The cookie may be split into numbered chunks when required. | Strictly necessary | Up to 30 days |
| __Host-authjs.csrf-token Cookie · GafferSuite (Auth.js) | Protects sign-in and account actions against cross-site request forgery. | Strictly necessary | Browser session |
| __Secure-authjs.callback-url Cookie · GafferSuite (Auth.js) | Returns you to the appropriate GafferSuite page after authentication. | Strictly necessary | Browser session |
| gaffersuite.ids Local storage · GafferSuite | Remembers FPL Entry ID and league ID values you provide for requested team and league functionality. | Functional, user requested | Until replaced or browser storage is cleared |
| gaffersuite:advice-news-read:v1 Local storage · GafferSuite | Remembers news stories you dismiss in Assistant Manager. | Functional, user requested | Until browser storage is cleared |
In production the Auth.js session cookie is normally named __Secure-authjs.session-token. It may be divided into numbered cookie chunks when necessary. Related security cookies protect authentication and return navigation. Clearing these necessary cookies signs you out.
Stripe Checkout
Stripe-hosted Checkout is opened only after you deliberately choose to proceed to payment. Stripe may use its own necessary payment, security and fraud-prevention technologies on its service. GafferSuite does not load Stripe tracking or checkout scripts before that action.
Your browser controls
You can remove cookies and local storage using your browser settings. Clearing local storage removes remembered FPL identifiers and dismissed-story preferences. Blocking or clearing authentication cookies signs you out and may prevent secure account features from working.
Future changes
If GafferSuite introduces optional analytics, advertising or tracking technologies in future, we will update this policy and obtain appropriate consent before activating them where required.
See also our Privacy Policy and Terms of Service.