Legal
Cookie Policy
Last updated: pending publication
This is a working draft published for structure and review. It is not yet the final, lawyer-reviewed agreement and should not be relied upon. The definitive version will replace this text before StageLink opens to the public.
1. What cookies are
Cookies and similar technologies are small files or storage items a site uses to keep you signed in, remember preferences, and understand usage. This policy explains which ones StageLink uses and how to control them.
2. Strictly necessary
Used for authentication and session management, PKCE/state/CSRF protection, locale and basic UI preferences, and security, rate limiting, and abuse prevention. These are required for the service and cannot be turned off in-product, though you can control them in your browser.
3. Analytics
Used to understand page visits, link clicks, public-page performance, and product usage, and to give artists dashboard metrics. Your choice is stored in the `sl_ac` cookie (1 = accepted, 0 = rejected); product analytics such as PostHog are gated by consent.
[TODO legal review: for EU users, non-essential analytics should require opt-in consent.]
4. Marketing
Used for campaign attribution, retargeting, advertising, or marketing pixels. No marketing pixels are assumed active today; any such cookies would require opt-in consent with preference and opt-out controls.
5. Cookie inventory
WorkOS session cookie (Necessary, WorkOS/StageLink) — auth session.
PKCE/state cookie (Necessary, StageLink/WorkOS) — OAuth security.
`NEXT_LOCALE` (Necessary/preference, StageLink) — language.
`sl_ac` (Analytics preference, StageLink) — analytics consent state, ~365 days.
PostHog cookies/local storage (Analytics, PostHog) — product analytics, only after consent where required.
[TODO legal review: confirm exact cookie names and lifetimes in production before publishing.]
6. Managing your choices
You can accept all, reject non-essential, or manage categories through the in-product consent control, and change your choice at any time. You can also manage cookies through your browser settings.
7. Changes and contact
We may update this Cookie Policy. Questions can be sent to the contact channel published here. [TODO legal review: insert the contact details.]