Cookie Policy

This Cookie Policy explains how Dupli-Spot ("we", "us" or "our") uses cookies and similar technologies under Regulation (EU) 2016/679 ("GDPR"), Directive 2002/58/EC (the "ePrivacy Directive"), the Italian Data Protection Code (Legislative Decree 196/2003 as amended), and guidance from the Garante per la protezione dei dati personali in force in 2025.

1. What Are Cookies and Similar Technologies?

Cookies are small data files stored on your device when you visit a website. We use them to remember preferences, keep sessions secure, and measure how the service is used. Cookies can be set by us (first-party cookies) or by trusted third parties that provide services for us. We also use sessionStorage, a browser technology that stores temporary data only for the duration of your browser tab session. Unlike cookies, sessionStorage data is automatically cleared when you close the tab.

2. Cookie categories we use

• Necessary cookies: Essential for authentication, security, and the core functionality of Dupli-Spot. Examples include the `cookie-consent` flag that remembers your banner choice and Supabase session tokens (`sb-access-token`, `sb-refresh-token`, `sb-session`). These cookies are always active.
• Analytics cookies and sessionStorage: Used to understand feature usage and improve performance through aggregated, anonymized data. We use sessionStorage to generate temporary anonymous session identifiers that track lookup activity (track and playlist searches). These identifiers are automatically cleared when you close your browser tab and are not linked to your identity. We also rely on Vercel Analytics and similar services that only activate with your consent.
• Functional cookies: Help us remember your UI preferences, language choice, track lookup history, or connection settings stored locally (e.g., localStorage entries tied to theme or search state). These cookies can be enabled without altering your baseline experience.
• Marketing cookies: Used for advertising or targeting across other sites. Dupli-Spot does not currently deploy marketing cookies, but any future introduction will require your prior consent.

3. Legal Basis and Consent

Necessary cookies rely on our legitimate interests in running and securing the service. Optional cookies only run once you grant consent via the banner or Cookie Settings. You may withdraw or modify that consent at any time without affecting the lawfulness of processing conducted beforehand.

4. Managing Cookies

Use the Cookie Settings page (footer link or /cookies) to change your consent choice, or adjust your browser preferences to block cookies entirely. Clearing cookies may sign you out or reset preferences, so you may need to reconfigure settings after doing so.

5. Third-Party Cookies

Some cookies are set by third-party providers whose services we use, such as Spotify for authentication, Supabase for data storage, and Vercel for hosting and analytics. Where those vendors operate outside the European Economic Area, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

6. Retention

Cookies remain on your device for the time needed to fulfill their purpose. Session cookies expire when you close your browser. Persistent cookies (e.g., consent flags or analytics identifiers) stay until their natural expiration (typically up to 12 months) or until you clear them. SessionStorage data, including anonymous analytics session identifiers, is automatically cleared when you close your browser tab. Server-side anonymous analytics data is automatically deleted after 90 days.

7. Updates to This Policy

We may update this Cookie Policy to reflect changes in technology, law, or our services. Material changes will be communicated via the app or other suitable channels, and the updated policy takes effect when published.

8. Contact

For questions about our use of cookies, contact us at duplispot@soundniccolo.com.