Cookie Policy
Last Updated: Aug 26, 2026
Cookie Policy
This policy explains how BandUp uses cookies and similar technologies. How we
process your personal data more generally is described in the
Privacy Policy.
1. What is a cookie?
A cookie is a small text file saved to your browser when you visit a website.
Cookies are what keep you signed in and remember your preferences.
BandUp also uses local storage: stage mode settings (theme, text size,
auto-scroll speed, content blocks) and content downloaded for offline reading are
kept on your device. This data is never sent to our servers and never leaves your
device.
2. Cookie categories
Category | What it does | Consent required |
|---|---|---|
Strictly necessary | Sign-in, session security, bot protection, remembering your preferences. The service does not work without these. | No |
Analytics | Aggregate statistics such as visitor counts and which pages are used, plus session recordings built from your clicks, scrolling and navigation. | Yes |
Marketing | Advertising and targeting. BandUp does not use marketing cookies today. | Yes (if used) |
Analytics cookies are loaded only if you consent in the cookie banner. If you
decline or later withdraw consent, they are not loaded and any existing ones are
deleted.
3. The cookies we use
3.1 Strictly necessary
Cookie | Purpose | Duration |
|---|---|---|
| Session token — keeps you signed in | 15 minutes |
| Refresh token — keeps your session alive without dropping you out | 60 days |
| Device identifier — lets us list your active devices and spot unfamiliar sign-ins | 90 days |
| Active workspace — opens the band you last used | 1 year |
| Your language preference — opens the interface in the language you chose | 1 year |
| Your cookie preference — which categories you consented to | 1 year |
Interface preferences | Remembers settings such as whether the sidebar is open, and your calendar and setlist view preferences | Up to 1 year |
| Post sign-up/sign-in redirect target | 10 minutes |
| Post social sign-in redirect target | 10 minutes |
| Google reCAPTCHA — protects sign-in and sign-up forms against bots | 6 months |
| Cloudflare bot protection — distinguishes automated traffic | 30 minutes |
Session cookies are set with the HttpOnly, Secure and SameSite flags and
cannot be read by JavaScript. The __Host- and __Secure- prefixes are
additional protections enforced by the browser itself.
3.2 Analytics
Loaded only with your consent.
Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Google Analytics | Distinguishing visitors | 2 years |
| Google Analytics | Maintaining session state | 2 years |
| Google Analytics | Distinguishing visitors | 24 hours |
| Google Analytics | Throttling request rate | 1 minute |
Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Microsoft Clarity | Assigns a Clarity identifier to your browser | 1 year |
| Microsoft Clarity | Groups the page views of a single session together | 1 day |
| Microsoft Clarity | Identifies the browser on which you first visited the site | 1 year |
| Microsoft Clarity | Checks whether the identifier was propagated correctly | 10 minutes |
| Microsoft Clarity | Recognises the browser across Microsoft domains | 13 months |
| Microsoft Clarity | Indicates whether the identifier should be refreshed | 7 days |
| Microsoft Clarity | Synchronises the user identifier across Microsoft domains | Session |
We use Google Analytics only on our marketing site (bandup.io), to understand in
aggregate how pages are used.
We use Microsoft Clarity on our marketing site and in our web app. Clarity
produces session recordings and heatmaps so we can understand how the product is
used: which pages you visit, where you click, how far you scroll, your browser and
device details, and your approximate location (country/city) derived from your IP
address. Text you type into form fields is masked in the recordings, and your
passwords are never recorded. When you are signed in, your user identifier is sent
to Clarity so that recordings can be matched to your account.
This data is processed by Microsoft Corporation and may be transferred outside the
European Union. For details see the
Microsoft Privacy Statement.
We do not use analytics data for advertising, do not sell it, and do not share it
with anyone other than the providers listed on this page.
3.3 Marketing
BandUp currently uses no marketing, advertising or tracking pixels. If we
start to, we will update this policy and ask for your consent separately through
the cookie banner.
4. Managing your preferences
In BandUp. A cookie banner appears on your first visit, where you can accept
all, reject all, or choose category by category. You can change your choice at any
time via the Cookie Preferences link in the page footer.
When you withdraw consent, the relevant cookies are deleted from your browser.
In your browser. All browsers let you view, delete and block cookies. If you
block strictly necessary cookies you will not be able to sign in or use the
service.
To opt out of Google Analytics separately, you can use Google's
browser add-on.
5. Mobile apps
Our iOS and Android apps do not use cookies. Instead, session information and
device preferences are kept in the device's secure local storage. The apps do
not use an advertising identifier (IDFA / Google Advertising ID) and do not
perform cross-app tracking.
The apps run the Microsoft Clarity software development kit. So that we can
improve the product, it records which screens you open, where you tap, how you
scroll, your device model, and your operating system and app versions; a session
replay is built from those interactions. Text you type is masked and your
passwords are never recorded. When you are signed in, recordings are matched to
your account. This data is processed by Microsoft Corporation and is not used for
advertising. If you would like your recordings deleted, you can request this atinfo@bandup.io.
6. Changes
When we update this policy we change the "Last updated" date on this page. If we
add a new cookie category we will ask for your consent again.
7. Contact
For any question about cookies:
UBIG Teknoloji A.Ş.
Caferağa Mah. Moda Cad. No: 5, 34710 Kadıköy/Istanbul, Türkiyeinfo@bandup.io
test