Cookie Policy

Last updated: 5 June 2026

This Cookie Policy explains how Music Traveler GmbH ("Music Traveler", "we", "us") uses cookies and similar technologies on our website and apps. It should be read together with our Privacy Policy.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, pixels, and software development kits (SDKs). They help a site function, remember your preferences, and understand how it is used.

2. How we manage your choices

Non-essential cookies and analytics load only after you give consent. We use Cloudflare Zaraz to manage third-party scripts and your consent preferences.

• On your first visit, a consent banner lets you Accept all, Reject all, or choose categories.
• You can change your choice at any time using the "Cookie settings" link in the site footer, or at Settings → Privacy → Cookie preferences.
• Strictly necessary cookies cannot be switched off, as the Services will not work without them.

3. Categories of cookies we use

3.1 Strictly necessary (always on)

Required for core functionality such as logging in, security, and load handling. These do not require consent.

• Session cookie (Better Auth) — Purpose: Keeps you logged in across pages and subdomains; Set by: Music Traveler; Typical duration: Session / up to 30 days
• Cloudflare Turnstile token — Purpose: Bot/abuse protection on forms (e.g. sign-in, contact); Set by: Cloudflare; Typical duration: Short-lived
• __cf_bm, cf_clearance — Purpose: Cloudflare bot management and security; Set by: Cloudflare; Typical duration: Up to 30 min / 30 days
• Zaraz consent cookie — Purpose: Stores your cookie consent choices; Set by: Cloudflare Zaraz; Typical duration: Up to 1 year
• Preference cookies — Purpose: Remember language and currency; Set by: Music Traveler; Typical duration: Up to 1 year

3.2 Analytics (consent required)

Help us understand usage and improve the Services. These load only after you consent.

• Umami — Purpose: Privacy-focused, self-hosted web and event analytics. Umami is designed to be cookieless and does not track you across sites.; Provider: Music Traveler (self-hosted); Typical duration: None / minimal
• _ga, _ga_* — Purpose: Google Analytics — distinguishes users and sessions for aggregate usage statistics; Provider: Google; Typical duration: Up to 2 years
• _clck, _clsk, CLID — Purpose: Microsoft Clarity — product analytics and aggregated interaction insights (e.g. heatmaps). Input fields are masked.; Provider: Microsoft; Typical duration: Up to 1 year

Note on Microsoft Clarity: Clarity captures aggregated interaction data (such as clicks and scrolling) to help us improve usability. It only runs after you consent to analytics, and sensitive input is masked.

3.3 Marketing

We do not currently use advertising or cross-site marketing cookies (for example, we do not run an advertising pixel). If this changes, we will update this Policy and add a marketing category to the consent banner before any such cookies are set.

4. Third-party services that may set cookies

Some features rely on third parties that may set their own cookies when you use them:

• Stripe — payment processing and fraud prevention on checkout pages (see <https://stripe.com/privacy>).
• Google Maps — interactive maps and address autocomplete.
• Apple / Google / Facebook — only if you use social sign-in.

These are governed by the respective providers' privacy and cookie policies.

5. Managing cookies in your browser

Most browsers let you block or delete cookies via their settings. Blocking strictly necessary cookies may prevent parts of the Services from working. Useful links:

• Chrome, Firefox, Safari, and Edge each provide cookie controls in their privacy settings.
• For analytics specifically, you can also use our cookie banner to reject analytics, or Google's opt-out at <https://tools.google.com/dlpage/gaoptout>.

6. Changes

We may update this Cookie Policy as our tools change. We will revise the "Last updated" date above and, where required, ask for renewed consent.

7. Contact

Questions about this Policy: privacy@musictraveler.com — Music Traveler GmbH, Annagasse 1/10, 1010 Vienna, Austria.