Storage with a purpose.

Sign-in and security

Secure account cookies support sign-in and your session. Sessions last up to seven days and end when you sign out. Blocking these cookies can prevent account features from working.

Drafts and preferences

Device drafts and recovery references for recording requests use local storage. They remain until removed by the site controls or your browser. When you choose a currency, the myband-currency-v1 preference cookie remembers that choice for one year across the landing page, studio and checkout. It contains only the currency code. An older currency preference in local storage is no longer used. The main domain and www address have separate storage. Clearing site data may permanently remove unsaved device drafts.

Other services

Google sign-in and Stripe checkout take place using those providers’ services. Their pages may use their own security, payment or preference storage, described in their privacy notices.

Optional analytics

Google Analytics loads only after you choose “Allow” or enable Analytics in Cookie settings. It helps us understand visits and steps such as starting a story, playing a preview and opening checkout. We send fixed step labels and permitted campaign labels, not stories, lyrics, recordings, song titles or account details. Full query strings and private resource references are removed. Google still receives technical information needed to receive a request, including an IP address.

Analytics uses _ga cookies to recognise a browser. We set their expiry to 60 days, refreshed when analytics is used. Your yes/no choice is stored on this device for 180 days. Google Analytics event-level retention is two months. User-level retention is 14 months and resets with new activity; aggregate reports can remain longer. Advertising permission is separate from analytics; analytics alone does not enable advertising personalisation.

PostHog product analytics

With the same optional analytics permission, PostHog receives page views and fixed journey events such as signup requests, story steps, preview playback and verified payment returns. The browser stores a random visitor identifier for up to 180 days and a tab session identifier with a 30-minute inactivity timeout. These identifiers are independent of your account. We remove private URL parameters and exclude names, emails, stories, lyrics, recordings and account identifiers. Automatic event capture stays off. A separate optional replay choice, explained below, can capture masked clicks, pointer movement and scrolling on the public homepage.

PostHog receives technical connection information; geographic enrichment is disabled. Withdrawing analytics stops future events and clears these browser identifiers, while events already received remain subject to the project’s retention settings. See PostHog’s privacy information.

Server-confirmed journeys

After you accept the expanded analytics choice, the secure, HTTP-only __Host-mbl_journey cookie records a random consent reference for up to 180 days. Our server can link the consented anonymous browser reference to a newly created email or Google account, its verification, and a checkout. It reports confirmed registrations and settled live payments even when a customer does not return from checkout. Account and order identifiers remain on our server and are excluded from PostHog events. These links and queued event payloads are kept for at most seven days; accepted payloads are erased after delivery. Withdrawing analytics removes the links and cancels pending delivery when the server acknowledges the update.

Optional public-page interaction maps

If you separately allow Public-page click and scroll maps, PostHog receives click positions, viewport size and numeric scroll depth on Full of Life, Only Us and Good Company public landing pages. Maps exclude private song screens, account dialogs, form text, stories, lyrics, recordings, URL parameters and fragments. General automatic event capture remains off. The map library uses the anonymous browser and session references described above, with its working state in memory.

Maps stay off unless you select their separate checkbox in Details or Cookie settings; the compact Allow button and earlier analytics choices do not enable maps. Turning maps off stops new collection and discards buffered positions. Data already received remains subject to the project’s retention settings.

Optional masked session replay

If you separately allow Session replay, PostHog can replay masked clicks, pointer movement and scrolling on the public homepage. It is paused for account dialogs, the studio, saved stories, songs, checkout returns, private URLs and pages with query strings or fragments. All text and form inputs are masked; only fixed public styling and public image attributes are permitted. Account screens, stories, lyrics, voice recordings, passwords and payment details are excluded. Network bodies, headers, console logs, canvas, iframes and automatic event capture are disabled.

The replay library uses the anonymous browser and session references described above and keeps its working state in memory. It loads only after replay permission. Cookie settings lets you allow analytics without replay or withdraw either choice. Recordings are retained for 30 days under this project’s current replay setting. PostHog’s privacy information also applies.

Diagnostics and feedback

With the expanded analytics choice, fixed error categories, rounded waiting times, page speed measurements, device category, browser family and operating-system family help us diagnose problems. Raw error messages, exception contents and form values are excluded. A short optional feedback question offers fixed reasons only; it has no free-text field. The myband:feedback:v1 preference in local storage remembers an answer or dismissal for 30 days and is removed when analytics is withdrawn.

MyBand live analytics

With the same optional analytics permission, this website counts page views and active browser sessions directly. The secure, HTTP-only __Host-mbl_live cookie holds a random signed session reference and expires after 30 minutes without activity. Visible pages send a small activity signal every 30 seconds. Our live counter stores a hash of this session reference, activity times and short-lived random event references to prevent duplicate counting; it does not store account IDs, page URLs, stories, lyrics or recordings.

Active sessions cover the last five minutes; a new session starts after 30 minutes of inactivity. Session records are removed after 30 minutes of inactivity during routine cleanup, and duplicate-event references expire after one hour. Cleanup also runs every five minutes. Daily totals without session references are retained for up to 95 days. Withdrawing analytics clears this cookie, stops the signals and removes the active session; aggregate totals already counted remain.

Purchase measurement

With analytics consent, a confirmed payment return sends Google the order reference, package, value and currency. The reference prevents the same purchase being counted again. It is separate from your account identity. We remember reported order references on this device for up to 180 days. Permitted campaign labels may be kept for up to 24 hours in tab storage to connect the visit to checkout. Test payments and spending an existing song credit are not new sales.

Google Ads and YouTube advertising

With Advertising permission, granted by “Allow” or the separate Advertising choice in Cookie settings, the Google tag (AW-1040413854) measures visits from our advertising, including YouTube, and supports Google Ads attribution and advertising audiences. It can use Google ad-click and browser identifiers, technical request information and permitted page information. We remove private query strings and resource references from the page information we supply. The Google tag is shared with Analytics, but each destination follows its own consent category. Before optional permission, the tag is blocked. Analytics permission alone does not configure Google Ads.

Google Ads may set _gcl_ attribution cookies. These typically last up to 90 days; Google controls its own storage and retention. Choosing Essential only denies advertising storage, ad user data and personalisation, stops new site advertising events and clears our _gcl_ cookies. See Google advertising information.

Optional advertising measurement

When Meta measurement is connected, Cookie settings offers a separate Advertising choice. Only after you allow it do we create advertising identifiers and send permitted activity to Meta through our server. The Meta browser Pixel also sends visits on approved public URLs, using the same event reference to prevent double counting. Events include page visits, fixed song-creation steps, preview plays, checkout and verified purchases. They can include a random browser identifier, a Meta ad-click identifier when present, IP address and browser details. Purchase events include a random order reference, package, value and currency. Meta uses these for ad attribution, campaign improvement and advertising audiences.

The mbl_marketing cookie identifies your advertising choice for up to 180 days. The _fbp and _fbc cookies last up to 90 days. Queued event and checkout request details stay on our server for at most seven days; event payloads are removed when delivery succeeds. A minimal event reference prevents duplicate delivery. The browser Pixel uses manual events with automatic customer matching and automatic page-data collection disabled. It is not loaded on private account or checkout-return URLs. Stories, lyrics, recordings, names, emails, account IDs and private URL parameters are excluded from these events. Meta has its own retention arrangements, described in its privacy policy.

Your controls

The banner offers “Allow” for optional analytics and advertising, or “Essential only” to keep both off. Use “Details” in the banner or “Cookie settings” at the bottom of any page to choose analytics, advertising, masked homepage replay and public-page interaction maps separately or withdraw permission. Replay and interaction maps each stay off until you select their separate checkbox in Details or Cookie settings. Essential storage supports sign-in, security, your requested drafts and preferences, and remembering your cookie choice; it does not include analytics or advertising. None of these optional categories is required to create or buy a song. Choosing “Essential only” stops new optional browser events and clears the site’s analytics and advertising cookies. Once our server confirms your choice, it also cancels undelivered advertising events and checkout attribution for this browser. If saving fails, a message asks you to retry. Events already sent, or already in transit, cannot be recalled by this control.

Changing a choice does not automatically erase reports already received by Google or Meta. You can also sign out, delete device drafts or clear site data in your browser settings. Microphone access is a separate browser permission, available only when you start a voice interview. See our privacy information for how data is processed.