Legal
Cookie Policy
What is stored in your browser when you visit this site, and why there is nothing here for you to dismiss.
Last updated:
The short version
- Browsing this site sets no cookies at all. Not one. There is nothing to accept, reject or configure.
- The single cookie this site can set belongs to the staff sign-in for our content management system. If you are not an EON staff member signing in, you will never receive it.
- Our analytics are cookie-free: they count page views without storing anything on your device. No advertising, no tracking you across other websites, and nothing written to your browser’s storage.
- Twitch and YouTube players load only when you press play. Until you do, neither platform is contacted and neither can set anything.
- That is why you see no cookie banner: there is no non-essential storage to ask you about.
What cookies are
A cookie is a small file a website asks your browser to keep and send back on later visits. Cookies are how a site remembers that you are signed in. The same goes for related browser storage such as local storage and session storage, which this site does not use at all.
Cookies are often associated with tracking, but that is a question of what a site chooses to do with them rather than what they are. The distinction that matters legally is between storage that is strictly necessary for a feature you asked for, and storage used for anything else — analytics, advertising, profiling — which requires your consent first.
Cookies this site sets
Exactly one, and it is not for you unless you work here. Public pages — the homepage, teams, results, achievements, content, about, partners, FAQ and the contact form — set no cookies whatsoever.
| Name | Purpose | Who receives it | Lifetime |
|---|---|---|---|
| payload-token | Keeps a signed-in staff member signed in while they work in the content management system. Without it the admin area cannot function. | Staff who sign in at /admin. Never set for public visitors. | 2 hoursHttpOnly, Secure, SameSite=Lax |
This cookie is strictly necessary: it exists only because a staff member asked to sign in, and it carries nothing about anyone’s browsing. It is marked HttpOnly, so no JavaScript on the page can read it; Secure, so it is only ever sent over an encrypted HTTPS connection; and SameSite=Lax, so it is not sent along with requests started by other websites. It expires two hours after sign-in.
Signed-in staff also have admin interface preferences — things like which columns they last sorted a list by. Those are stored in our own database against their account, not in their browser.
Analytics
We use Vercel Web Analytics to see which pages get read and roughly where visitors arrive from. It is the only measurement tool on this site, and we chose it because it works without cookies.
It stores nothing on your device — no cookie, no local storage entry, no identifier of any kind is written to your browser. It therefore cannot recognise you on a later visit or follow you to another website, and it leaves nothing behind for you to clear.
What it produces is an aggregate count: the page viewed, the referring site, and general characteristics such as country, browser and device type, worked out from the request your browser has to send anyway. On the live site the measurement script is served from our own domain and reports back to our own domain, so your browser contacts no third-party host to load it. The resulting figures are processed on our behalf by Vercel, who host this site.
We use it to decide what to publish more of. It is not used to build a profile of you, it is never shared with advertisers, and it does not give us a way to identify an individual visitor.
The measurement script is added by JavaScript after the page has loaded, so a visitor browsing with JavaScript turned off is never counted. Every page of this site is built to work that way, and none of them needs the script to function.
What this site still does not use
This is a deliberate list, not an oversight. The site contains no:
- advertising, retargeting or conversion-tracking tags;
- social media tracking pixels or share-button scripts;
- fingerprinting, session recording or heatmap tooling;
- tracking across other websites, or across your devices;
- local storage, session storage or IndexedDB entries — the site writes nothing to your browser’s storage;
- any cookie whatsoever on a public page, analytics included.
Why there is no cookie banner
Under the EU ePrivacy rules and the Belgian law implementing them, consent is required before storing something on your device that is not strictly necessary for a service you asked for. That requirement is about storage, and this site has almost none to ask you about.
The only thing it ever stores is the strictly necessary staff session cookie described above, and only once someone deliberately signs in. Our analytics store nothing on your device at all, which is precisely why they need no consent prompt — and why we picked a cookie-free tool instead of bolting a banner onto a conventional one. A consent dialog here would be a dialog with nothing to decide, and nothing is hidden behind a “reject” button you have to go looking for.
If you would rather not be counted even so, any standard content or tracker blocker will stop the measurement script from loading, and nothing on this site depends on it. Note that the script does not act on the browser “do not track” signal, so a blocker is the reliable way to opt out.
Third-party players
Our content pages can play Twitch streams and YouTube videos. These are the only places where another company could set a cookie, and it cannot happen by accident.
Nothing loads until you press play. The player frame does not exist in the page before that — arriving on the page, scrolling past a video or leaving without pressing anything contacts neither platform and sets nothing. Autoplay is switched off, so no player ever starts on its own.
When you do activate one, your browser connects to that platform directly, and from that point its own cookie and privacy policies apply to what it collects. A few details of how we set these up:
- The YouTube player uses youtube-nocookie.com, Google’s own privacy-enhanced host, which defers cookie-based tracking until playback starts.
- The Twitch player is always our own channel, built by our server from the channel name in our settings — an editor cannot point it somewhere else.
- Your browser is instructed to refuse any embedded frame other than those two players, through this site’s Content-Security-Policy. No other third-party frame can load here even if something tried to add one.
- Players are sent only this site’s domain as the referring address, not the specific page you were reading.
Instagram and X posts are presented as our own summary cards built from content in our CMS. They load no code, no images and no frames from those companies, so neither learns anything unless you choose to follow a link out to them.
Managing and deleting cookies
Every major browser lets you see, block and delete cookies and site storage from its settings — usually under Privacy or Site settings — including clearing everything a single site has stored. Most also offer a private or incognito window, which discards storage when you close it.
Blocking cookies will not affect your use of the public pages of this site, because they do not rely on any. Blocking third-party cookies may stop an activated Twitch or YouTube player from working, since those platforms rely on their own. Staff who block cookies for this domain will not be able to stay signed in to the admin area.
Changes to this policy
We will update this page whenever what the site stores changes — a new cookie, a new embedded provider, or a change to how we measure traffic — and the “last updated” date above will change with it.
Questions
How we handle personal data more broadly, including your rights over it, is set out in our Privacy Policy. Anything else about this page can be sent through the contact form or by email to contact@eonesports.gg.
