Cookie Policy
This Cookie Policy explains what cookies are, how Treble uses them, and how you can control them. It supplements our Privacy Policy.
Contents
1.What cookies are
Cookies are small text files that websites place on your device. They allow a site to remember your actions and preferences (such as login state, language, cart contents) over a period of time. Cookies are either session cookies (deleted when you close the browser) or persistent cookies (remain until they expire or you delete them). Similar technologies like local storage and pixels are covered under the term "cookies" in this policy.
2.Cookie categories we use
Under the EU ePrivacy Directive and the GDPR, cookies fall into the following categories. We only use the first category by default; everything else requires your explicit consent.
2.1 Strictly necessary (always on)
These cookies are essential for the Service to function — login, security, vote integrity, form submission. They cannot be disabled without breaking core functionality. They do not require consent under EU law.
2.2 Functional (off by default)
Cookies that remember your preferences (e.g., theme choice, language) to enhance experience. Currently we don't use any.
2.3 Analytics / performance (off by default)
Cookies that help us understand how the Service is used so we can improve it. Currently we do not use third-party analytics (Google Analytics, Mixpanel, Plausible, etc.). If we add any in the future, they will only be loaded after you opt in.
2.4 Advertising / targeting (not used)
We do not use advertising, retargeting, or cross-site tracking cookies. The Service does not show ads.
3.Detailed cookie list
The following table lists every cookie we set, its purpose, and how long it lasts. We update this table when we change cookies in production.
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
TREBLESESS |
PHP session ID — keeps you logged in and stores CSRF tokens, flash messages. | Strictly necessary | Session |
TREBLE_VOTED_{songId} |
One-year token confirming this device already voted on a specific song. Prevents double-voting. | Strictly necessary (anti-fraud) | 1 year |
treble_cookie_consent |
Stores your cookie preference choice (so we don't show the banner again). | Strictly necessary | 12 months |
We may also use local storage (no cookies) for transient state like the volume of the audio player or scroll position — these never leave your device and are not transmitted to us.
4.Third-party cookies
The Service does not embed third-party scripts (no Google Analytics, no Facebook Pixel, no Hotjar, no chat widgets). Outbound emails sent through Amazon SES do not place tracking pixels on you when you visit the Service.
If you click external links (for example, sharing your song on Twitter, or following a footer link to an external site), those external sites have their own cookie policies which we do not control.
5.Managing your preferences
Through our cookie banner: The first time you visit, you'll see a banner explaining your options. You can accept or reject non-essential categories. To change your choice later, click Cookie preferences at any time (also available in the footer).
Through your browser: Most browsers let you control cookies through settings. You can delete existing cookies and set browsers to refuse new ones, though doing so may break functionality (you won't be able to log in or vote).
6.Do Not Track & Global Privacy Control
We honor the Global Privacy Control (GPC) signal where applicable. If your browser sends a GPC signal, we treat it as a request to opt out of any sale or sharing of personal information (which we already do not do) and to enable enhanced privacy defaults. We do not track or profile across sites, so the legacy "Do Not Track" signal does not change our behavior.
7.Changes to this policy
If we add new cookies or substantially change how we use them, we will update this policy and re-prompt for consent where required by law. The "Last updated" date at the top reflects the most recent revision.
8.Contact
Questions about cookies or this policy: privacy@treble.popit.marketing