Legal
Cookie Policy
Last updated: September 2026
1. Who is responsible
Verista Soccer Spain, Carrer Barcelona, 22, 08110 Montcada i Reixac, Catalonia, Spain, operates this website and Verista Stats. We are the data controller for anything described below. Questions: team@veristasoccer.com.
2. The rules we follow
Article 22.2 of the Spanish Ley 34/2002 de Servicios de la Sociedad de la Información (LSSI-CE) lets us store or read information on your device only with your informed consent — unless that storage is strictly necessary to deliver a service you asked for. We also follow the Guía sobre el uso de las cookiesof the Agencia Española de Protección de Datos and the GDPR (Regulation EU 2016/679).
In practice that means: nothing outside the strictly necessary table below is loaded before you say yes, rejecting is exactly as easy as accepting, nothing is pre-ticked in your favour, and you can browse the entire site having rejected everything.
3. Strictly necessary — no consent required
These make the site work. They are exempt under Art. 22.2 LSSI-CE, so they cannot be switched off; if you block them, you will not be able to sign in.
| Name | Set by | Purpose | Retention |
|---|---|---|---|
| sb-<project>-auth-token | Supabase (first-party cookie, EU region) | Holds your signed-in session so pages you are entitled to see load without asking you to log in again on every request. | 1 hour, silently refreshed while you stay signed in |
| sb-<project>-auth-token-code-verifier | Supabase (first-party cookie) | Short-lived PKCE verifier that binds an email-confirmation or Google sign-in redirect to the browser that started it, so a login link cannot be completed from somewhere else. | Deleted as soon as sign-in completes |
| verista.cookie-consent | Verista Soccer Spain (first-party, browser localStorage) | Records the choice you made in the cookie banner. Without it we would have to ask you on every page. | 12 months, then we ask again |
4. Audience measurement — off unless you allow it
This is the only optional category. It is disabled by default: the script is not loaded at all until you consent, and turning it back off unloads it on your next page view.
| Name | Set by | Purpose | Retention |
|---|---|---|---|
| Vercel Web Analytics | Vercel Inc. (processor) | Counts page views so we can see which pages are useful. It sets no cookies and stores nothing on your device: visitors are counted from a hash of the incoming request, the data is aggregated, and it carries no identifier that could follow you to another website. | The visitor hash is discarded after 24 hours; only aggregate counts are kept |
5. What we do not do
No advertising or retargeting pixels. No social-network trackers. No cross-site profiling, no data brokers, no sale of personal data. We do not build behavioural profiles, and we do not use a cookie wall — declining costs you nothing.
6. International transfers
Vercel Inc. is based in the United States and acts as our processor for hosting and audience measurement, under a data processing agreement incorporating the European Commission’s Standard Contractual Clauses. Supabase stores our database and authentication data in the European Union.
7. Changing or withdrawing your choice
You can change your mind at any moment, and it takes effect immediately:
- Use here or in the footer of any page.
- Or clear this site’s data in your browser, which deletes the stored choice and makes the banner appear again.
Your choice is remembered for 12 months, after which we ask again. We record only the choice itself and when it was made.
8. Your rights
You may access, rectify, erase, restrict, port or object to the processing of your personal data — see our Privacy Policy for how. You can also complain to the Agencia Española de Protección de Datos at www.aepd.es.