2SG · Cookie Policy · Version 1.2 · Under review
Every cookie we set or allow, what it does, how long it lasts, and whether it is switched on right now. No vague categories, no "and similar partners".
Under review
This Cookie Policy is published in full and written to be relied on, but it is with a promotions attorney for review and may change before the giveaway opens. Wording may be corrected, clarified, or tightened; a few details — the sponsor’s legal name, the business address and the effective date — are still being finalised and appear as marked blanks.
This document may change. Every change is published here with the version noted, and anyone with a 2SG account is emailed when a new version goes up — never quietly. The version in force on the day you use the Services is the one that governs you. Questions: support@2sg.us.
This table is only worth anything if it is true. Whenever we add, remove or change a tracker, this page changes on the same day and the version number goes up. If you ever find something in your browser that is not listed here, tell us at support@2sg.us and we will fix the page.
This summary exists to be readable. It is not the policy — if it ever disagrees with the sections below, the sections below win.
2sg.us is operated by 2nd String Gaming, LLC ("2SG", "we", "us"). The company is in formation and will be registered before the giveaway opens; until then the business is operated by its founder under the same name. Questions about anything on this page: support@2sg.us.
A cookie is a small text file a site asks your browser to keep. It comes back on your next visit, which is how a site remembers you are signed in, or what is in your cart.
We also use a few relatives of the cookie, and we treat them all the same way in this policy:
First-party means we set it. Third-party means another company sets it through our site. Session means it disappears when you close the browser. Persistent means it stays for the period shown.
These make the site work. They cannot be switched off, and no privacy law requires consent for them, because without them there is no site to use.
| Cookie | Set by | Purpose | Life | Status |
|---|---|---|---|---|
| sb-*-auth-token | Supabase (us) | Keeps you signed in | 1 hr / refresh | Active |
| sb-*-refresh-token | Supabase (us) | Renews your session without making you sign in again | 30 days | Active |
| cart | Shopify | Remembers what is in your cart | 14 days | Active |
| _secure_session_id | Shopify | Secures the checkout session | 24 hrs | Active |
| _shopify_s | Shopify | Session identifier used by the store | 30 min | Active |
| keep_alive | Shopify | Carries your region between pages | 30 min | Active |
| 2sg_privacy_choices | Us | Remembers that you opted out, so we do not ask again | 12 months | Active |
| 2sg_theme | Us | Remembers light or dark, if you set it | 12 months | Active |
Plain speak — the awkward one
2sg_privacy_choices is a cookie whose entire job is to remember that you do not want cookies. There is no way around that: without it we would forget your opt-out the moment you closed the tab. It holds a yes-or-no value and nothing that identifies you.
The status column is the honest part of this page. We are disclosing everything we may use so that nothing ever runs undisclosed, but we are not pretending it is all switched on. Check this column to see what is actually happening today.
| Cookie | Set by | Purpose | Life | Status |
|---|---|---|---|---|
| — | Cookieless analytics | Counts page views and referrers with no cookie and no cross-site tracking | n/a | Active |
| _ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions, measures traffic | 24 months | Not in use |
| _shopify_y | Shopify | Store analytics | 12 months | Not in use |
| _fbp | Meta | Attributes a visit to a Facebook or Instagram ad | 3 months | Not in use |
| _ttp | TikTok | Attributes a visit to a TikTok ad | 13 months | Not in use |
Status as at Monday, 21 September 2026. This page is updated on the same day any of it changes.
Pixels send online identifiers to the advertising platform. Under California's CPRA and comparable laws in Colorado, Connecticut, Virginia and elsewhere, that counts as "sharing" for cross-context behavioural advertising even though no money changes hands.
If those rows ever read Active, your opt-out rights under Section 8 of the Privacy Policy apply in full, a "Your Privacy Choices" link appears in the site footer, and we honour Global Privacy Control automatically.
Global Privacy Control is a signal your browser sends to every site, saying you opt out of sale, sharing and targeted advertising. We honour it automatically. No account, no form, no waiting.
It is built into Firefox, Brave and DuckDuckGo, and available as an extension for Chrome, Edge and Safari. Details at globalprivacycontrol.org.
Every major browser lets you block or delete cookies, usually under Settings, then Privacy. Blocking strictly necessary cookies will stop you signing in or checking out. Blocking third-party cookies alone will not.
The first time you arrive we show a cookie notice with two buttons: Accept all and Essential only. Nothing in Section 3 runs until you choose, and choosing Essential only leaves only the cookies in Section 2.
We are not required to ask. US state privacy laws work on an opt-out model, not the opt-in consent model used in Europe, so we could switch analytics on and simply offer you a way to refuse afterwards. We ask first because being asked is better, and because a site that takes your answer before it acts is the kind of site we want to run.
Your answer is remembered in 2sg_privacy_choices so the notice stops appearing. Clearing your cookies clears that answer too, and the notice comes back.
When advertising is running, a Your Privacy Choices link appears in the footer of every page and turns it off for this browser. While the advertising rows above read Not in use, there is nothing for it to switch off, so the link is not shown.
Those opt-outs are themselves stored in a cookie, so clearing your cookies clears them and you will need to set them again. That is their design, not ours.
Browsers also send an older "Do Not Track" signal. There is no agreed standard for what a site should do with it, and we do not respond to it. We respond to Global Privacy Control instead, which is a real standard with legal weight, and which does the thing Do Not Track was supposed to do.
If you visit our Twitch channel or our Discord server, those platforms set their own cookies under their own policies. Embedding a Twitch player or a YouTube video on our pages lets that platform set cookies too. We do not control them and cannot switch them off for you — use the platform's own settings.
We update this policy whenever what we run changes, and the version number and date at the top move with it. The status column is the whole point, so it is kept current rather than reviewed annually.
Questions about anything on this page, or something you found in your browser that is not listed:
This policy forms part of our Privacy Policy and is governed by our Terms of Use.
Second String Gaming Cookie Policy v1.2 · Under review 17 Sep 2026 Every player belongs.
No number yet? Take a player number.
Accounts are not live yet — the roster system is being built on stream. Nothing you type here is sent anywhere until it ships.