Grassroots CoachCoaching workspace for grassroots football

Cookies and similar technologies

Cookie and storage notice.

Solicitor approved. Last updated 20 July 2026. This notice explains the browser storage, scripts and similar technologies used by the Grassroots Coach public website and app.

Who is responsible

Thunder Apps Ltd (company number 17350869), registered in England and Wales with its registered office at 2 Cedar View, Church Crookham, Fleet, England, GU52 6AD, trading as Grassroots Coach. Privacy questions can be sent to privacy@grassrootscoach.app.

What this notice covers

UK rules cover more than traditional cookies. They can also apply to local storage, cache storage, scripts, pixels, device signals and other technologies that store information on, or access information from, a browser or device.

Public website analytics

The public website uses Vercel Web Analytics for aggregate page-use statistics and Vercel Speed Insights for real-world performance measurements. These services use first-party scripts and send limited measurements to Vercel. Web Analytics does not use third-party advertising cookies; Vercel creates a short-lived request-derived visitor hash and discards the visitor session after 24 hours. We remove query strings and fragments, allow only recognised public routes and do not use these measurements for advertising, cross-site tracking or decisions about individuals.

Why analytics starts on

We use these technologies only to collect statistical information needed to understand and improve the website and service. We rely on the PECR statistical-purposes exception and legitimate interests under UK GDPR. The exception requires clear information and a simple, free means of objecting, which is provided below. If the purpose or technology changes so that an exception no longer applies, we will obtain consent before enabling it.

Analytics retention and recipients

Vercel processes the measurements as our service provider. We use the shortest suitable reporting period available under the active Vercel plan rather than setting an indefinite period. The current technical details are available in the linked Vercel privacy and Speed Insights documentation.

Your analytics preference

Your choice is stored in this browser under gcp-website-analytics-enabled until you change it or clear site data. This storage is used only to remember and respect your objection. Turning analytics off prevents the analytics components from loading for future measurements in that browser.

App sign-in and session storage

The app uses Supabase Auth browser storage for access and refresh tokens so a signed-in user can remain authenticated and securely use the requested service. The storage key can include the Supabase project reference. It continues for the authenticated session and is removed or invalidated through sign-out, session expiry, revocation or account deletion. This is strictly necessary for the signed-in service.

App installation, offline cache and preferences

The installable web app uses a service worker and browser Cache Storage for the app shell, code and on-demand drill images. It also uses limited local storage for service operation and privacy choices. Cached material remains until replaced, expired by the cache policy, or removed through browser or installed-app controls. On a shared device, sign out and clear site data or remove the installed app where appropriate.

Cloudflare Turnstile security

Login, signup and password-reset forms use Cloudflare Turnstile to distinguish people from automated abuse. Its script runs browser checks and produces a short-lived verification token. A cf_clearance cookie is used only if Turnstile pre-clearance is enabled for the relevant hostname; any such cookie follows the configured Cloudflare challenge-passage period. These security checks are strictly necessary to protect authentication and the service.

No advertising trackers

Grassroots Coach does not use advertising cookies, social-media tracking pixels, behavioural advertising profiles or cross-site marketing trackers. Links to other websites are governed by those sites’ own storage practices.

Managing device storage

Use the control below to object to website analytics. Browser settings can also show or delete cookies, local storage and cached site data. Blocking strictly necessary authentication or security storage may prevent sign-in or other requested app functions from working.

Website analytics choice

Vercel Web Analytics and Speed Insights are currently on for this browser. Turning them off stops new website page-use and performance measurements from this browser. It does not affect essential hosting or security.

You can object at any time using this control.