Privacy
Cookie policy
This page explains every cookie and similar piece of browser storage used on Supa Takeover (supatakeover.co.uk), what each one does, and how to control them. Last updated 17 May 2026.
Your choice
Toggle each category on or off. Essential cookies are required for the site to work and can't be disabled.
Essential Always on
Session, CSRF protection, "remember me", and this preference cookie.
Analytics
Google Analytics 4 — anonymous traffic stats so we can see which features get used.
Always on
Essential cookies
Required for the site to work. These are not analytics — you can't turn them off without breaking login, form submissions, or your active session.
| Cookie | Purpose | Lifetime |
|---|---|---|
| supa_takeover_session | Keeps you logged in and remembers your active takeover. | 2 hours of inactivity |
| XSRF-TOKEN | Protects forms and uploads against cross-site request forgery. | Matches your session |
| remember_web_* | Keeps you signed in across visits if you ticked "remember me" or signed in with Google. | 5 years |
| cookie_consent | Remembers your choice on the cookie banner so we don't ask again. | 1 year |
Optional
Analytics cookies
Set by Google Analytics 4 (measurement ID G-JRVDNC8PMD) to count visitors and understand which pages get used. Only loaded after you press "Accept all". Choose "Deny all" and we'll never set them — any existing copies are deleted.
| Cookie | Purpose | Lifetime |
|---|---|---|
| _ga | Distinguishes unique visitors anonymously. | 2 years |
| _ga_JRVDNC8PMD | Records session count and last activity for this site. | 2 years |
On your device only
Browser storage
Not strictly cookies, but worth mentioning. These never leave your device — we don't read them on the server.
- storage localStorage — remembers which submissions an admin has marked as seen, so the unread badge stays accurate across reloads.
- storage sessionStorage — caches the challenges list for faster back-navigation. Cleared when you close the tab.
Embedded services
Third-party services
The site loads assets from these third parties. They don't set cookies on this site, but they do see your IP address when their content loads.
- • Google Fonts — site typography.
- • Leaflet + CARTO basemaps — interactive maps on takeover spots.
- • jsDelivr — date picker and rich-text editor libraries.
- • Google Sign-In — only if you choose to sign in with Google; redirects you to accounts.google.com.
Controls
How to manage cookies
Change your choice any time using the "Cookies" button in the bottom-left corner of any page, or with the controls at the top of this page. You can also clear or block cookies in your browser settings — see your browser's help pages for details.
For the wider platform rules, see our terms & conditions.