Privacy and cookies
Last updated 27 October 2026.
What APL keeps
- Your account: your name, email, password (stored scrambled, so nobody can read it), when you joined and when you last signed in.
- Your profile: your picture, your about me, your APL News handle, and the player you are if an admin has linked you.
- What you do here: posts, replies, likes, reposts, who you follow, which posts you open, predictions and coins, notifications, and for managers the club's decisions.
- Your internet address is held for up to an hour to stop password guessing, and is never saved.
Who sees it
- Everyone: your name, picture, about me, handle, posts and replies, and the league's records.
- League admins: your email and account details, to approve and run accounts.
- Your email and password are never shown on the site.
Who else handles it
- Hetzner hosts the server and the database.
- Emails go out through the league's email provider, only if you leave them on.
- APL News articles are written by an AI (Anthropic's Claude) from league results, which include player names and stats. Nothing you write and no email address is sent to it.
- No adverts, no analytics, no tracking. Your data is never sold.
Cookies
Essential cookies are always on. Preference cookies only remember choices you make.
| Cookie | Type | What it does | How long |
|---|---|---|---|
| authjs.session-token | Essential | Keeps you signed in. | 30 days, or until you sign out |
| authjs.csrf-token | Essential | Stops other sites from signing in or out for you. | Until you close the browser |
| authjs.callback-url | Essential | Returns you to the page you were on after signing in. | Until you close the browser |
| apl-cookie-consent | Essential | Remembers your cookie choice. | 1 year |
| apl-follows | Preference | The club you follow on the home page. | 1 year |
| apl-colours | Preference | Club colours or black and yellow. | 1 year |
| sidebar_state | Preference | Whether the sidebar is open or closed. | 7 days |
You have not chosen yet. Preference cookies are off until you do.
Your choices
- Change your cookie choice above at any time.
- Sign in to turn email notifications off or download your data.
- To correct something or have your account removed, ask a league admin. Match stats and league records stay, as they belong to the league.
- A post you delete is hidden from everyone at once, and kept in the league's records.