This Cookie & Similar Technologies Policy explains storage that may support sign-in, playback, preferences, checkout, and discovery. It distinguishes essential functions from optional or future uses and does not claim that a consent manager or advertising trackers are currently implemented.
What this policy covers
This draft covers cookies and similar technologies used in connection with Undiscovered One’s music platform and linked account services. A cookie is a small piece of information stored by a browser for a website. Local storage can retain information in a browser between visits; session storage generally lasts for a particular tab or session. Device identifiers and comparable technologies may help recognize an account session, browser, or authorized playback device.
These technologies can support listeners, creators, Music Plus subscribers, memberships, purchases, radio and streaming, and account management. This policy describes relevant categories, not a verified inventory of every active cookie, vendor, or identifier. A service-specific inventory and required disclosures should be confirmed before adoption and updated as technologies change.
Strictly necessary storage
Essential technologies support functions such as signing in through Undiscovered One Accounts and Supabase-based authentication, keeping an authenticated session, protecting accounts, preventing abuse, and completing actions you request. Storage may also support checkout continuity, account security checks, and recognition needed for authorized-device offline playback.
These functions are distinct from optional marketing or audience measurement. Where permitted by law, storage strictly necessary to provide a service you request may not require consent. That does not make every identifier essential or eliminate privacy obligations. Essential storage should be limited to the relevant function and duration.
Preferences
Preference storage may remember choices such as language, display preferences, player settings, or other options a feature offers. Some preferences may be linked to an account and stored on the service rather than only on a device. Clearing browser storage may reset locally saved choices without deleting account records.
Not every preference technology is automatically essential. Where law requires a choice or consent for a preference use, that requirement applies. This draft does not assert that every example setting is already available.
Analytics and performance, where used
Analytics or performance technologies may help understand feature usage, playback errors, loading behavior, and service reliability. Depending on implementation, they may use browser or device identifiers and interaction events. Creator performance measurement is not permission to expose private listener identities; the privacy boundary described in the Privacy Policy still applies.
Optional analytics should be separated from strictly necessary diagnostics where required. Any provider, data collected, applicable choice, and consent requirement should be assessed before introducing it. This policy does not claim that a particular analytics vendor, anonymous-only measurement system, or tracking configuration is already active.
Recommendations and personalization, where used
Storage or identifiers may support music recommendations, discovery preferences, playback continuity, and recognition of prior interactions. Personalization may also rely on account information held on the service; clearing cookies alone does not necessarily delete listening history or reset account-based recommendations.
The legal treatment depends on the purpose and implementation, not simply the label “personalization.” Appropriate notices, consent, or opt-outs should be provided where required. If a personalization setting is offered, its effect should be explained there; this draft does not claim that a specific toggle is currently live.
Advertising only if introduced
This draft does not state that advertising cookies, cross-site trackers, or targeted advertising are currently active. If advertising technologies are introduced, their purposes, providers, relevant information, and required user choices should be disclosed before or when required for that use.
Undiscovered One does not sell personal data to advertisers. Any future advertising or sponsored-content system must respect that rule and applicable restrictions on tracking, sharing, and consent. Essential account storage must not be relabeled as advertising permission.
Stripe and checkout technologies
Stripe and related payment flows may use their own cookies, identifiers, or comparable technologies to complete a payment, protect checkout, prevent fraud, manage recurring billing, or support Stripe Connect onboarding. A payment page may involve storage from the payment provider rather than Undiscovered One alone.
The exact technologies depend on the checkout or onboarding flow and the provider’s current implementation. Relevant provider notices should be available in that flow. Blocking required payment-provider storage may prevent purchases, subscriptions, verification, or payout setup from completing.
Session and persistent duration
Session cookies are generally designed to expire when a browser session ends. Persistent cookies remain until their set expiry or until you remove them. Browser session restoration can affect what survives closing and reopening a browser. Local storage often remains until it is cleared by the site, browser, or user; session storage generally ends with its tab or session.
Durations should reflect the purpose, security needs, and applicable law. Different providers and technologies may use different lifetimes. This draft does not invent exact expiry periods; specific durations and renewal behavior must be documented from the actual implementation before adoption where required.
Your storage controls
Your browser generally lets you view or remove cookies and site data, block some storage, and adjust third-party cookie settings. Device or browser privacy settings may provide additional controls. Settings can differ across browsers and devices, so a change on one device may not apply to another.
If Undiscovered One provides a cookie-preferences control, it should offer the relevant choices and a way to revisit them. This draft does not claim that a cookie banner, consent-management system, or preference center is already implemented. Required consent must be obtained before non-essential technologies are used where applicable; publishing this text is not a substitute for that requirement.
Disabling essential cookies or storage can break sign-in, account sessions, checkout, or authorized-device playback. Clearing site data may sign you out or remove local preferences or offline access information. It does not itself cancel a paid subscription, close an account, remove service-side records, or refund a purchase. Use account or support channels for those actions.
Global privacy and opt-out signals
Undiscovered One will honor legally required privacy and opt-out mechanisms where applicable, including recognized signals such as Global Privacy Control when the law requires them to be honored for the relevant activity. A signal’s effect depends on applicable law and the processing involved; it is not automatically a request to delete an account or block all essential storage.
This is an intended compliance commitment, not a claim that a particular signal-detection system is already implemented or tested. Required mechanisms must be verified before applicable processing is introduced. Ordinary browser “Do Not Track” settings and legally recognized opt-out signals are not necessarily treated the same by law.
Changes, contact, and related documents
October 7, 2026: this practical draft replaced the Cookie Policy placeholder. It is not yet publicly adopted and has no effective date. Before adoption, active technologies, providers, durations, and required choices must be checked against the service. Meaningful future changes should receive appropriate notice and renewed consent when required.
For questions, use the existing Undiscovered One support/contact channel in the service or on the main website. Formal details remain [Company legal name], [Privacy contact], and [Company mailing address], to be confirmed before adoption. The Privacy Policy explains personal-information handling, the Terms explain account and purchase responsibilities, and the Digital Bill of Rights sets out the unadopted foundational principles.