Cookies

Show Match uses a few cookies. Only the session cookie is required to stay signed in.

Essential

• __Host-sm_session — keeps you signed in. HttpOnly, Secure, SameSite=Lax, up to 30 days. We store a hash of the token.
• __Host-sm_oauth — holds the sign-in attempt for a few minutes while Google (or an email code) finishes. It is removed when sign-in completes.

Preferences, not essential

• sm_city — the city hub you last opened, so the next visit can start there. Also saved in local storage under the same name. The public pages do not vary their cache on this cookie; the city is in the URL.
• sm_asked — which missing cities this browser already asked for, so the counter only moves once.

You can delete these in your browser. Deleting sm_city just means the next visit uses geolocation again, or Sofia when there is none. There is no advertising cookie and no analytics cookie.