Cookie Policy

These technologies provide authentication, security, transaction continuity, or your saved privacy choice. The Platform cannot provide the relevant function without them, so they are not controlled by the marketing switch.

• smm_app: authenticates your account and associates requests with a server-side session. It is HttpOnly, Secure in production, SameSite Strict, and normally expires after 30 days without sliding renewal.
• smm_csrf: helps prevent cross-site request forgery on authenticated actions. It is HttpOnly, Secure in production, SameSite Strict, and normally lasts for the browser session.
• __Host-smm_privacy: stores a protected random preference reference, the latest marketing choice, its policy version, decision time, and consent-record reference. It is HttpOnly, Secure, SameSite Lax, and expires 365 days after it is last written.
• Checkout session storage: remembers the selected Drop package or custom amount in the current browser tab while Stripe checkout is completed. It is removed after use or when the tab session ends.
• Stripe checkout technologies: Stripe may use cookies or similar data necessary to securely render checkout, prevent fraud, remember an eligible payment method, and complete the transaction.
• hCaptcha technologies: registration uses hCaptcha to distinguish legitimate activity from automated abuse. hCaptcha may receive a verification token, device or browser data, and your IP address and may use necessary storage under its own policy.

The privacy cookie is not an advertising identifier and is not used for fingerprinting. Deleting it creates a new random browser reference and may require you to make a new choice. When signed in, the latest account-associated choice may be restored.

• Support chat: for authenticated users, our self-hosted Chatwoot widget may use a cw_user_<website-token> cookie and related browser storage to maintain an identified support session and conversation. It receives your SMM user ID, email, name, optional avatar, role, profile status, and country. Duration follows the support-system configuration and conversation needs.
• Spotify playback: in the submission review and campaign preparation screens, the player for the selected track loads automatically to make listening available. Loading the player does not start the audio. On public curator profiles, the player loads when you choose an item to play. Loading connects your browser to Spotify before audio starts: Spotify receives your IP address, browser and device information, and the requested content identifier, and may set or read its own and third-party cookies. These technologies may serve purposes beyond playback, as described in Spotify’s Cookie Policy and Privacy Policy. SMM’s marketing setting controls our marketing integration; it does not configure Spotify’s player or its cookies. Provider and browser settings offer controls over third-party cookies; blocking them may affect playback.

These functions connect to services that may act independently for their own security, compliance, and service-improvement purposes. Their cookies and retention are governed by their policies and browser controls.

When marketing measurement is allowed, Meta Pixel may load in your browser and Meta may set or read _fbp (a browser identifier) and _fbc (a click identifier). Meta receives limited page and conversion events described in the Privacy Policy. SMM also uses per-tab session-storage markers to avoid sending the same checkout event repeatedly. After marketing is allowed, SMM can preserve an incoming ad click in an _fbc cookie for up to 90 days. Before that choice, a click identifier from the entry URL is held only in page memory. Meta may also manage these cookies and other storage; their effective duration can vary by browser and configuration.

If you disable marketing, SMM stops new Pixel and server-side conversion events associated with your choice and attempts to remove known _fbp and _fbccookies from the SMM domain. This cannot delete information or cookies controlled by Meta on another domain or undo processing that lawfully occurred before your choice.

We use IP-derived country information to select a privacy mode. In the EEA, United Kingdom, and Brazil, Meta marketing technologies remain off unless you affirmatively allow them; an approval must be renewed after 180 days. In the United States and Switzerland, they may be on unless you opt out. In other countries, they may be on by default unless you previously opted out or Global Privacy Control is active. Applicable local law may provide additional rights.

If we cannot determine a country, we apply the opt-in mode. Geolocation is approximate, so contact us if the wrong mode is shown. A browser choice does not override technologies that are strictly necessary for authentication, security, or a transaction you request.

• Open Your Privacy Choices to allow or disable Meta marketing where that control is available and view the reference for your current decision.
• Enable Global Privacy Control; the Platform treats a detected signal as a marketing opt-out in every region and records it for a signed-in account where applicable.
• Use browser settings to block or delete cookies and site data. Blocking necessary storage may prevent sign-in, checkout, fraud checks, support chat, or embedded playback.
• Use provider or browser controls for information stored on third-party domains.

Browsers may send “Do Not Track” signals that do not have a uniform legal or technical meaning. We do not respond to those signals unless required, but we do respond to Global Privacy Control as described above.

To apply and demonstrate a marketing choice, we record the random browser preference reference, choice, time, legal-policy version, approximate country, IP address, browser User-Agent, and, when signed in, user ID. This evidence is used for privacy compliance, not to fingerprint you or create a music-interest profile. A denial remains effective until you change it, the applicable account choice changes, or the preference is no longer available under our retention rules.

We may update this Policy when technologies, providers, or laws change. Material changes will be published as a new dated version and, where required, presented for a new choice. Questions about cookies or privacy choices may be sent to support@squeezemymusic.com or mailed to Squeeze My Music LLC, 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States.