Cookie Policy
Last updated 2026-07-03
Cookie Policy
This site sets a small number of first-party cookies, all of them strictly necessary or functional. There are no third-party cookies, no analytics cookies, no advertising cookies, and no trackers. This page lists the entire cookie surface; it's generated from an audit of the site's actual code, and it changes only when the code does.
Cookies this site sets
| Cookie | Lifetime | What it does |
|---|---|---|
candycode-chrome | 30 days | Stores the height of your browser's interface chrome (a single small number, in pixels) so pages can be laid out for your real visible screen. Contains no identifier and can't be used to recognize you. |
candycode-member-session | Up to 90 days of activity | Keeps you signed in. A signed, httpOnly session cookie scoped to this site only, so a session from one artist's site is meaningless on another's. Set only when you sign in. |
Signed-in members who unlock a ticketed or member-gated show may also receive a short-lived, signed entitlement cookie that proves your access to that show's stream. Like the session cookie, it's strictly necessary: it exists only to let you watch what you've unlocked.
What happens on other domains
When you buy a membership or ticket, checkout happens on Stripe's hosted pages on Stripe's own domain. Cookies set there are Stripe's, governed by Stripe's cookie policy. None of them are set on this site.
Consent
Because every cookie on this site is strictly necessary or functional, no cookie-consent banner is required, and none is shown. If a non-essential cookie is ever introduced, this policy will be updated and visitors in regions that require it (for example the EU and UK) will see a consent banner before any such cookie is set.
Do Not Track and Global Privacy Control
Most sites' policies explain which tracking these signals do or don't turn off. Here there is nothing to turn off: this site does no cross-site tracking, no analytics profiling, and no ad targeting, whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the
session cookie means you can't stay signed in; blocking
candycode-chrome only affects layout accuracy.
Questions: legal+pto@candycode.com.