Cookies and local storage
Last updated 2026-11-11
Giglogik sets no advertising or analytics cookies. Everything below is either needed for something you asked for, such as staying signed in or finishing a sign-up (essential), or a convenience you can switch off (functional).
Your choice
Functional cookies are written only after you allow them. Change your choice here:
Counting visits
Giglogik counts which pages are seen on giglogik.com and in the app. No cookie is used for that, and it does not know who you are. You can turn the counting off in this browser: one cookie then records your choice, for the site and the app alike. A browser that sends Global Privacy Control or Do Not Track is not counted either.
Cookies
| Name | Purpose | Lifetime | Category |
|---|---|---|---|
| sb-*-auth-token (one or more parts) | Your sign-in session with Supabase Auth. You stay signed in on this device until you sign out | Up to 400 days on this device. The sign-in inside it stays valid only while the app keeps refreshing it, and signing out removes it | Essential |
| bf_consent | Remembers your cookie choice so we do not ask again: the choice, the day you made it and the version of the choices you were offered, and nothing else. If the choices change, we ask again | 12 months | Essential |
| bf_nocount | Records that you turned visit counting off, so that neither giglogik.com nor the app counts your visits. Both read it. Set only when you press “Turn counting off”. It holds nothing else and is tied to no account | 12 months, or until you turn counting back on | Essential |
| sb-*-auth-token-code-verifier | Proves, when Google sends you back, that the sign-in started in this browser | Removed when Google sends you back. If you stop halfway, it stays for up to 400 days | Essential |
| bf_signup_agreed | Carries your two sign-up answers (16 or older, terms accepted) and your device's time zone to Google and back | 15 minutes, only while signing up with Google | Essential |
| bf_signup_sent | The address a confirmation link was just sent to, so the page can say so and send it again | 1 hour, on the sign-up page only | Essential |
| bf_invite_link | A new invitation's link, so the band's page can show it for you to send yourself | 10 minutes, on that band's pages only | Essential |
| bf_google_state | Protects the Google Calendar connection flow against forgery | 10 minutes, only while connecting | Essential |
| bf_admin_return | Giglogik's own admins only: the way back to the admin's own session after looking at somebody's account | Until the admin returns to their own account, at most eight hours | Essential |
| bf_active_band | Which band the app opens on | 12 months | Functional |
| bf_locale | Your browser language, so dates and clocks render right on the first paint | 12 months | Functional |
| bf_theme | Light, dark, or system theme | 12 months | Functional |
| bf_calendar | Which kinds of event the calendar shows | 6 months | Functional |
Local storage
| Key | Purpose | Lifetime | Category |
|---|---|---|---|
| bf_theme | Mirror of the theme cookie, read before the page paints | Until you choose essential cookies only or clear your browser data | Functional |
| Service worker cache | The offline page and static assets, so the app loads with a poor connection. No personal data is cached | Until you clear your browser data. Past 400 files, the oldest are let go | Essential |
| Push subscription | Kept by your browser after you press “Turn on” for push notifications: the address at its maker’s push service that notifications are sent to, and your permission to show them | Until you turn notifications off, sign out, sign in as somebody else in this browser, or take the permission back in your browser | Only if you turn it on |
| Offline gig summary (bf-offline-v1) | Your next six gigs as you would read them on the night: when and where, your answer, part and fee, the Info, timeline, contacts and setlist, so each one opens without signal. Kept only with your permission, and deleted when you sign out, take the permission back, or reach the sign-in page | Renewed on Home or a gig's page when older than ten minutes. Deleted when you sign out, take the permission back, or reach the sign-in page | Functional |
Third parties: Stripe sets its own cookies on Stripe's checkout and billing pages, and Google on its consent screen. Neither runs on Giglogik's pages. Signing in with Google passes through our sign-in provider Supabase, whose network (Cloudflare) sets a short-lived security cookie on Supabase's own address. See the privacy policy for the processors involved.