Essential storage and optional, consent-based analytics.

Essential authentication storage

Supabase authentication uses cookies or equivalent local authentication storage to establish, refresh, and protect a signed-in session. This storage is needed for login, password recovery, private account pages, and access checks. Removing it or blocking it can sign you out or prevent protected features from working.

Short-lived password-recovery storage

The recovery flow can hold encrypted pending link input in an HttpOnly cookie for up to five minutes before password submission. That pending input is not proof of account access. The server must verify the recovery credential when the new password is submitted; a normal signed-in session does not authorize that recovery step.

Functional session storage

DeePicks uses browser session storage for temporary feature state, including a planned-parlay draft and the result or error from bet-slip screenshot extraction while a user reviews an import. Session storage is scoped to the browser tab and is not an advertising cookie.

Optional Google Analytics 4

DeePicks includes Google Analytics 4 with measurement ID G-NDJQJHQ7E9. The Google script is not loaded and no analytics request is made before acceptance or after rejection. Your choice is stored locally under deepicks:analytics-consent:v1 so the site can remember it.

After acceptance, DeePicks manually sends only allowlisted public-page views and clicks on the public sign-up link. URLs are reduced to an approved path: query strings and fragments are discarded, and authentication tokens, emails, application user IDs, private Bet Tracker data, billing details, private-page URLs, and referrers are not included.

Automatic page views are disabled in the tag configuration. DeePicks does not implement Enhanced Measurement events; Enhanced Measurement must also remain disabled in the GA4 web data-stream settings. Google Analytics may set identifiers such as _ga cookies after acceptance, subject to the configured GA4 retention controls.

Analytics is excluded from Privacy and Cookies pages regardless of your preference. Fresh document navigation isolates these disclosures from previously loaded scripts. Cookie settings on these pages can remember your analytics choice for eligible pages without loading Google Analytics here.

Google ad serving remains paused

Verified Pro subscribers and owner accounts never load advertising or Funding Choices scripts. If authentication or subscription status cannot be verified, advertising is blocked. Dashboard, predictions, Today, Picks, Parlay, Results, Bet Tracker, Account, billing, authentication, Privacy, Cookies, and API routes remain ad-free.

AdSense publisher ca-pub-9383931334339710 is used to bootstrap Google consent messaging for verification on approved public content pages, including the landing page, for logged-out visitors and server-verified Free accounts only. Advertising requests remain paused, including after consent acceptance; Auto ads and both application advertising activation gates remain off. Live Google advertising is not enabled. The homepage also contains direct sponsor banners, separate from Google ad serving. Following such a link opens the sponsor website, whose own privacy notice applies; a sponsor banner is not a Google consent control. Accepting analytics never grants advertising consent; advertising storage, user-data, and personalization signals remain denied.

The current analytics banner is not a Google-certified advertising consent platform. Google Privacy & messaging provides the separate advertising consent and withdrawal flow; its real browser behavior must be verified before advertising activation. Personalized ads for EEA, UK, and Swiss visitors require a Google-certified CMP integrated with IAB TCF. Non-personalized ads can also use cookies and require consent; rejecting personalization alone is not permission for advertising storage.

If advertising is activated later, Google and its partners may use cookies or similar identifiers for ad delivery, frequency limits, measurement, fraud prevention, and consented personalization on approved public content routes only. The CMP must explain applicable purposes, providers, and storage duration and allow choices to be changed. Cookie settings controls analytics only. Advertising privacy settings on eligible editorial pages reopens Google's consent message when its API is ready. Advertising choices do not change analytics consent or unpause advertising during this verification release. Google may use consent-related storage to remember choices; its actual storage names and lifetimes remain to be verified. DeePicks stores only a temporary reopening instruction in session storage under deepicks:reopen-advertising-settings, not a TC string.

Managing current storage

Use the persistent Cookie settings control to accept, reject, or withdraw analytics consent. Withdrawal removes recognizable GA cookies, clears the loaded analytics state, and reloads the page under the rejected choice so no further analytics events are sent. Browser controls can also inspect or clear cookies and site storage.

You can sign out to end the application session. Clearing essential storage may interrupt an in-progress review or draft and will usually require you to sign in again.