Last Updated: 8/5/2026
Last updated: 4 August 2026
This policy explains how BandUp uses cookies and similar technologies. How we
process your personal data more generally is described in the
Privacy Policy.
A cookie is a small text file saved to your browser when you visit a website.
Cookies are what keep you signed in and remember your preferences.
BandUp also uses local storage: stage mode settings (theme, text size,
auto-scroll speed, content blocks) and content downloaded for offline reading are
kept on your device. This data is never sent to our servers and never leaves your
device.
Category | What it does | Consent required |
|---|---|---|
Strictly necessary | Sign-in, session security, bot protection, remembering your preferences. The service does not work without these. | No |
Analytics | Aggregate statistics such as visitor counts and which pages are used. | Yes |
Marketing | Advertising and targeting. BandUp does not use marketing cookies today. | Yes (if used) |
Analytics cookies are loaded only if you consent in the cookie banner. If you
decline or later withdraw consent, they are not loaded and any existing ones are
deleted.
Cookie | Purpose | Duration |
|---|---|---|
| Session token — keeps you signed in | 15 minutes |
| Refresh token — keeps your session alive without dropping you out | 60 days |
| Device identifier — lets us list your active devices and spot unfamiliar sign-ins | 90 days |
| Active workspace — opens the band you last used | 1 year |
| Your language preference — opens the interface in the language you chose | 1 year |
| Your cookie preference — which categories you consented to | 1 year |
Interface preferences | Remembers settings such as whether the sidebar is open, and your calendar and setlist view preferences | Up to 1 year |
| Post sign-up/sign-in redirect target | 10 minutes |
| Post social sign-in redirect target | 10 minutes |
| Google reCAPTCHA — protects sign-in and sign-up forms against bots | 6 months |
| Cloudflare bot protection — distinguishes automated traffic | 30 minutes |
Session cookies are set with the HttpOnly, Secure and SameSite flags and
cannot be read by JavaScript. The __Host- and __Secure- prefixes are
additional protections enforced by the browser itself.
Loaded only with your consent.
Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Google Analytics | Distinguishing visitors | 2 years |
| Google Analytics | Maintaining session state | 2 years |
| Google Analytics | Distinguishing visitors | 24 hours |
| Google Analytics | Throttling request rate | 1 minute |
We use Google Analytics only on our marketing site (bandup.io), to understand in
aggregate how pages are used. We do not use analytics data for advertising and do
not share it with third parties.
BandUp currently uses no marketing, advertising or tracking pixels. If we
start to, we will update this policy and ask for your consent separately through
the cookie banner.
In BandUp. A cookie banner appears on your first visit, where you can accept
all, reject all, or choose category by category. You can change your choice at any
time via the Cookie Preferences link in the page footer.
When you withdraw consent, the relevant cookies are deleted from your browser.
In your browser. All browsers let you view, delete and block cookies. If you
block strictly necessary cookies you will not be able to sign in or use the
service.
To opt out of Google Analytics separately, you can use Google's
browser add-on.
Our iOS and Android apps do not use cookies. Instead, session information and
device preferences are kept in the device's secure local storage. The apps do
not use an advertising identifier (IDFA / Google Advertising ID) and do not
perform cross-app tracking.
When we update this policy we change the "Last updated" date on this page. If we
add a new cookie category we will ask for your consent again.
For any question about cookies:
UBIG Teknoloji A.Ş.
Caferağa Mah. Moda Cad. No: 5, 34710 Kadıköy/Istanbul, Türkiye[email protected]
