Mexar 
Mexar 
Last updated 25/10/2026
This policy explains which cookies and similar tools Mexar Airsoft (“we”, “us”) uses on this website, what each one does, how long it lasts and how you can change your mind. Please read it with our privacy notice.
02Your choice
On your first visit, a panel at the bottom of the screen lets you choose. Visit counting (Analytics) is on unless you switch it off; Marketing only runs if you allow it. You can accept all, reject Marketing, or pick categories in Settings, where Analytics has its own switch. We keep your choice for 12 months and then ask again.
03Strictly necessary
Always on. The site needs these to do what you ask, such as keeping you signed in or remembering your cookie choice. UK law (the Privacy and Electronic Communications Regulations) does not require your consent for them.
- mx_consent (cookie)
- Remembers what you chose in the cookie panel, so we do not ask on every page.
- Duration: 12 months, then we ask again
- Type: First-party
- mexar-consent (local storage)
- A copy of the same choice, with the date you made it.
- Duration: Until you clear it. Only the mx_consent cookie decides what runs.
- Type: First-party
- mexar-upload-auth (local storage)
- Keeps you signed in as a player, a site or shop owner, or to send us footage.
- Duration: Until you sign out
- Type: First-party
- mexar-me (local storage)
- Remembers your player name, so the top bar can link to My profile straight away.
- Duration: Until you sign out
- Type: First-party
- mx_seen_rank (local storage)
- Remembers the last rank we showed you, so a promotion is only celebrated once.
- Duration: Until you clear it
- Type: First-party
- mexar-newsletter (local storage)
- Remembers that you have joined the mailing list, so the sign-up box stops asking.
- Duration: Until you clear it
- Type: First-party
- mx_dev (cookie)
- Set when you clock in at a site. It marks this device so one phone cannot clock in many accounts, or fake a clock-in. It is only sent with clock-ins and cannot be read by scripts on the page.
- Duration: 2 years
- Type: First-party
- mx_session (cookie)
- Set when you sign in. It lets the site show you player and team pages, which are only for signed-in players. It holds your sign-in token and is removed when you sign out.
- Duration: Until your sign-in expires, about an hour, renewed while you use the site
- Type: First-party
- mexar-clockin (browser database)
- Lets you clock in at a field with no signal: it holds the site check-in passes and any clock-ins waiting to be sent, then sends them once you are online.
- Duration: 12 hours
- Type: First-party
- list: (session storage)
- Remembers which page of a list you were on, so Back returns you to the same place.
- Duration: Until you close the tab
- Type: First-party
- Person check (Cloudflare Turnstile)
- Only after three failed sign-in attempts: a check from Cloudflare that you are a person, to stop password guessing. Cloudflare may set its own cookie while it runs.
- Duration: Only while the check runs
- Type: Third-party, Cloudflare
- Bot check (Vercel BotID)
- When you send a form, a small script from our host checks the request comes from a person and not a bot. It helps stop spam and fake accounts.
- Duration: Only while the form is sent
- Type: First-party, run by our host Vercel
04Admin only
Only used in the private admin area. Visitors and players never get these.
- mexar-admin-auth (local storage)
- Keeps the administrator signed in.
- Duration: Until the administrator signs out
- Type: First-party
- mexar-staff (local storage)
- Marks a browser used by our own staff, so our own visits are not counted in the site figures.
- Duration: Until it is cleared
- Type: First-party
05Analytics
On unless you switch it off. UK law (PECR, as changed by the Data (Use and Access) Act 2025) lets a website count its own visits to improve itself without asking first, as long as it tells you and makes it easy to say no. Switch Analytics off in Cookie settings (the link at the foot of every page) and nothing more is counted from this browser.
- Page and click counter
- Tells our own server which page you opened, which page sent you there and which button or link you pressed. From the request our server also notes your device type (phone, tablet or computer) and your rough location (country and city). Your IP address is turned into a scrambled code that changes every day, so we can count visitors without knowing who you are. We never store your IP address with these figures and never use them for advertising.
- Duration: Nothing is stored on your device
- Type: First-party
- imp: (session storage)
- Notes which listings you have already been shown in this tab, so a listing is counted as seen only once per visit.
- Duration: Until you close the tab
- Type: First-party
06Marketing
Off unless you allow it.
- mx_ref (cookie)
- If another player shared a link with you, this remembers who it was, so they get the credit if you create a profile. Only the first link counts. Nothing is sent to any advertiser.
- Duration: 30 days
- Type: First-party
07Other websites
Links to TikTok, Instagram, Stripe and shops are plain links. Nothing from those services loads on this site until you go to them. Some shop links are affiliate links, and a shop may set its own cookies once you are on its website. Its own cookie policy covers that. If you pay for a plan, you do so on Stripe's own page, under Stripe's cookie policy.
09Changes to this policy
We will update this policy when we add or remove a cookie. The date at the top shows when it last changed.
10Contact us
Questions about this policy? Email info@mexarairsoft.com. What we hold about you, and why, is in our privacy notice.