Cookie Policy

Version 2.6 - Last updated: September 21, 2026

Current setup: BrewTunes uses a strictly necessary session cookie plus three optional categories you control: preferences, measurement, and advertising. Measurement is entirely our own — the data stays in BrewTunes' database, is shared with nobody, and keeps no IP address. Advertising is different, and we would rather say so plainly: accepting it loads Meta's, Google's and OpenAI's own tools, and lets us tell Meta about your trial or subscription, including your hashed email address and your IP address, which leaves the European Union. Refusing costs one click and stops all of it.

1. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage, can remember your preferences or support website functionality.

2. Cookies and storage we use

NameTypePurposeDuration
brewtunes_sidFirst-party, httpOnly cookieKeeps you signed in and secures your session. Strictly necessary.Up to 60 days
CSRF/session security tokens, if enabledFirst-party cookie or server-side session tokenProtects forms and account actions from misuse. Strictly necessary.Session or short-lived
brewtunes:themelocalStorageRemembers the light/dark mode you selected.Until you clear it
brewtunes:langlocalStorageRemembers your selected site language.Until you clear it
brewtunes:lastPlaylistlocalStorageRemembers the last playlist you deliberately selected.Until you clear it
brewtunes:playbackModelocalStorageRemembers whether you chose tracks with or without vocals.Until you clear it
brewtunes:consentlocalStorageRemembers which cookie categories you accepted or refused. Strictly necessary, so that your choice is respected.Until you clear it
brewtunes:vidlocalStorage, measurement onlyA random identifier that lets us count returning visits as one visitor instead of several. It contains no personal data and is only created if you accept the measurement category.Until you clear it
brewtunes:acqlocalStorage, measurement onlyRemembers which campaign or website first brought you to BrewTunes, so we can tell which advertising is worth continuing. Only created if you accept the measurement category.Until you clear it
bt-legal-langlocalStorageRemembers the language selected on these legal pages.Until you clear it
bt_roadmap_*localStorage, admin onlyRemembers the private roadmap simulator values and completed items.Until you clear it

3. Preference, measurement and third-party cookies

Preferences. Preference storage (for example your language, theme and last-played playlist) is set only after you give consent through our cookie banner. If you choose “Only necessary”, these preferences are not stored and reset each visit. Withdrawing this consent later also deletes what was already stored under it.

Measurement. If you accept the measurement category, we store a random identifier on your device and record which pages you visit and which campaign first brought you to BrewTunes. We use this only to understand where people lose interest in the site and which advertising is worth continuing. This measurement is entirely first-party: the data stays in BrewTunes' own database and is shared with no one.

If you refuse the measurement category, nothing is stored on your device for measurement and no identifier is collected from it. We still count page views in aggregate on our server — which page was requested, in which language, from which campaign — because that counting stores no identifier of any kind and cannot be traced back to you or your device. If you create an account, we also keep with it the campaign or website that brought you, as explained in the Privacy Policy. BrewTunes keeps no IP address in its own measurement records; server security and access logs are a separate matter, described in the Privacy Policy.

Advertising. This category is offered only while an advertising tool is actually in use. If you accept it, we load Meta’s and Google’s own measurement tools, and we additionally report your trial or subscription to Meta from our server so that it can tell which advertisement worked. To let Meta recognise the person who saw the ad, that report includes your email address in irreversibly hashed form and your IP address, along with your browser type and Meta’s own advertising identifier where one exists. BrewTunes does not keep the IP address it forwards: it is read from the request being served and passed straight on.

OpenAI (ChatGPT ads). Under the same advertising consent we also load the OpenAI Ads measurement pixel and report your trial or subscription to OpenAI from our server, so we can tell whether an ad shown in ChatGPT brought you here. That report contains your email address in irreversibly hashed form, your IP address and browser type, and OpenAI’s own click reference (“oppref”) if you arrived from one of its ads. If you accepted advertising before OpenAI was added, we ask you again and send it nothing until you answer.

This is a transfer of personal data outside the European Union, to Meta, Google and OpenAI in the United States, and those companies then act under their own terms and privacy policies. If you refuse the advertising category none of it happens: the tools are not loaded, no report is sent, and nothing leaves the European Union for this purpose.

When payment forms are used, our designated payment provider (currently Stripe) may set its own cookies or similar technologies during checkout and order management. Those technologies are governed by the provider's own privacy and cookie policies. BrewTunes does not load payment scripts on its own pages; the checkout opens in a hosted environment provided by the payment provider.

4. Your choices

When you first visit, a banner lets you accept everything, refuse everything that is not strictly necessary, or choose category by category. Refusing takes exactly one click, the same as accepting.

You can change or withdraw your choice at any time through the Cookie preferences link at the bottom of every page — withdrawing is as easy as consenting, and anything already stored under a category you switch off is deleted. You can also delete cookies and local storage in your browser settings. Deleting the session cookie signs you out. Blocking strictly necessary cookies may prevent the Service from working.

5. Legal basis

Strictly necessary cookies are used under the exemption in Article 5(3) of the ePrivacy Directive as implemented in applicable law. Non-essential cookies will be set only with consent under applicable ePrivacy rules and the GDPR.

6. Changes and contact

We may update this Cookie Policy to reflect changes in technology or law. Questions should be sent to privacy@brewtunes.es.