Legal
Cookies
Every cookie this product sets, listed by name rather than by category — including the one analytics cookie on the marketing site, and the reason artist pages carry none of them.
Last reviewed with the current code
There is no third-party tracking
DropRoute does not load an advertising pixel, a session recorder, or any tracking script on the public artist pages it serves. Nothing follows a visitor from one artist’s page to another’s.
On this marketing site and inside the signed-in dashboard, we count page views with Vercel Web Analytics — the measurement tool of the platform that already hosts and serves every request. It sets no cookies, stores nothing in your browser, and reports aggregate counts, not people. The marketing site additionally uses Google Analytics, which does set a cookie; it is listed in the table below by name. Artists’ public pages are deliberately excluded from both.
An artist can add their own Meta, TikTok, or Google tag to their page. When they have, that page shows a consent choice before anything loads — the tag scripts are not fetched at all until you say yes, and saying no is remembered just as firmly, in a dr_pixel_consent entry in your browser’s local storage scoped to that one artist. A yes on one artist’s page never authorises a tag on another’s.
The cookies
| Name | Why | Lasts |
|---|---|---|
| sb-*-auth-tokenDashboard only | Keeps you signed in to the dashboard.An authentication token issued by Supabase. | Until you sign out, or the token expires |
| dr_sPublic link pages | Groups a visitor’s page views into one session, so two views by the same person are not counted as two visits.A random opaque identifier. No personal data, and no link to an account. | 30 minutes, extended while the visitor is active |
| dr_prefPublic link pages | Remembers which streaming service a fan chose, so it can be shown first next time. Only set when the artist enables preferred-service memory.A service name, for example “spotify”. | 90 days, and clearable by the visitor |
| _ga and _ga_*Marketing site only | Google Analytics on the marketing site, so we can see which pages and searches bring visitors. Never present on artists’ public pages or in the dashboard.A random client identifier used by Google Analytics. | Up to 13 months, and clearable by the visitor |
Consent, plainly
The three product cookies are strictly necessary for a function the visitor asked for: staying signed in, being counted once rather than twice, and being shown the service they picked last time. None of them profiles anyone, and none needs a banner.
The Google Analytics cookie on this marketing site is the one that is not strictly necessary — it exists so we can see which pages and searches bring visitors. It never follows anyone onto an artist’s page or into the dashboard, and blocking it in your browser costs you nothing here. If you are in a jurisdiction where analytics cookies require prior consent, know that we are aware of the obligation and a consent control for this one cookie is on the roadmap; this page will change when it ships.
Clearing them
Any browser can delete cookies for a site, and doing so costs you nothing here: you sign in again, a fan simply stops having a remembered service, and our page counts lose one visitor. There is no state worth preserving in any of them.
More on what is recorded and for how long is in the privacy policy.