Cookies & local storage.

Fan voting

Opening the fan vote page creates the rivalry-voter cookie, a random browser identifier used to remember one final vote. It is HTTP-only, uses SameSite=Lax and Secure on HTTPS, and is sent only to /api/vote. Its lifetime is up to 400 days, renewed when you load voting results; browsers may remove it sooner. Clearing site data removes this browser’s voting restriction. It is not used for advertising.

Your theme preference

The rivalry-theme local-storage entry remembers whether you chose the light or dark theme. Local storage is different from a cookie: this preference stays in your browser and is not automatically attached to every request. It has no fixed expiry and can be removed through your browser’s site-data settings.

Your language preference

On unprefixed pages, we use your browser’s preferred supported language, falling back to English. A link with a language prefix keeps that language. Choosing a language in the menu saves only its language code in the rivalry-locale preference cookie for up to one year. The cookie uses SameSite=Lax and Secure on HTTPS. Clearing it restores automatic browser-language detection.

Administrator session

The rivalry-admin cookie is used only for administrator sign-in. It identifies an authenticated session and expires after eight hours. It is HTTP-only, uses SameSite=Strict, and is marked Secure on the HTTPS production website. It is not an advertising or visitor-tracking cookie.

The rivalry-admin-ui cookie lets the browser check whether to show administrator controls. It is readable by JavaScript, expires after eight hours and uses SameSite=Strict and Secure on HTTPS. It does not grant access; the server verifies the separate session cookie. Signing out removes both cookies. Neither cookie is used for advertising or visitor tracking.

Search, filters and third parties

Search runs locally. Comparison filters can appear after the # symbol in a shared URL; those fragments are not sent as part of an HTTP request to the server. Submitting a support report does not create a tracking cookie.

Vercel Web Analytics, when enabled, uses no third-party tracking cookies. Google’s AdSense script is loaded on public pages; see the Advertising section of our Privacy policy for its current status and consent information. No third-party photo embeds are loaded. External websites may use their own cookies after you follow a link to them.

Managing stored preferences

Use your browser’s settings to inspect or remove site data for messivsronaldo17.com. Clearing local storage resets your theme preference. Clearing the admin session cookie signs you out if you are an administrator. If the site introduces additional storage technologies, this inventory will be updated.