Cookie Policy

Last updated: 2026-07-09

1. What we use, by category

Our consent banner (CookieConsent v3, self-hosted) groups everything into three categories. Here is the complete inventory — cookies and browser storage, because storage deserves the same transparency:

Strictly necessary

Always on. Required for the site and the web player to function.

NameTypePurpose
cc_cookieCookie (first-party, 6 months)Stores your consent choice so we do not re-prompt on every page
iv_authlocalStorageKeeps you signed in to the web player
iv_player_snapshotlocalStorageRemembers your playback position so the player resumes where you stopped
iv_progress_queuelocalStorageQueues listening progress while you are offline, syncs when you reconnect
iconicVoicesLeadslocalStorageFallback copy of a notify-me email you submitted, kept in your browser if the network submission fails
ivBannerDismissedsessionStorageRemembers that you closed an in-page banner during this visit
Cloudflare TurnstileCookie / script (challenges.cloudflare.com)Bot protection on the sign-up and password-reset forms only

Analytics

NameStatusPurpose
Plausible AnalyticsActive (cookieless)Anonymous aggregate page-view counts. Sets no cookies, stores no personal data, does no cross-site tracking — which is why it runs regardless of the Analytics toggle; the toggle still controls the Consent Mode signal
Google Analytics 4 (_ga)Configured, currently disabledWould load only after Analytics consent, with IP anonymization
Microsoft ClarityConfigured, currently disabledWould load only after Analytics consent

Marketing

NameStatusPurpose
Meta Pixel (_fbp)Consent-gated; loads only after you grant MarketingAd measurement; communicates with connect.facebook.net
TikTok Pixel (_ttp)Consent-gated; loads only after you grant MarketingAd measurement; communicates with analytics.tiktok.com
iv_emlocalStorage; written only with Marketing consentA hashed (never plaintext) copy of an email you submitted, used for ad-platform matching

2. How consent works, by region

Region detection uses your browser timezone; if we cannot tell, we treat you as EEA (the stricter default).

California (CCPA/CPRA): we do not sell personal information. If the consent-gated marketing pixels are active in your region, you can opt out of that sharing at any time — click "Reject all" or toggle Marketing off in the banner's Customize dialog. That is our "Do Not Sell or Share" mechanism; no account or email is needed.

3. How to change your preferences

4. Third parties

Where the tools above involve a third party, their privacy policies are:

Tool Category Privacy Policy
Cloudflare (hosting, Turnstile) Strictly necessary cloudflare.com/privacypolicy
Plausible Analytics Analytics (cookieless; aggregated only) plausible.io/privacy
Google Analytics 4 Analytics (consent-gated; currently disabled) policies.google.com/privacy
Microsoft Clarity Analytics (consent-gated; currently disabled) privacy.microsoft.com
Meta Pixel Marketing (consent-gated) facebook.com/privacy/policy
TikTok Pixel Marketing (consent-gated) tiktok.com/legal/privacy-policy

5. The apps

The iOS and Android apps use no cookies, no advertising identifiers, and no third-party analytics. See the Privacy Policy, section 3.

6. Contact

Questions or requests: [email protected]. For how we handle data generally, see our Privacy Policy.