Cookie Policy

Cookies we set directly

These cookies are set by Bandmate (bandmate.co) and are required for the site to work, or to remember small preferences between visits.

• bandmate_session — A signed session token that identifies you while you are signed in. Lifetime: 30 days, refreshed on activity. Required.
• bandmate_csrf — A random token used to prevent cross-site request forgery on form submissions. Lifetime: 1 day. Required.
• bandmate_theme — Remembers your choice of light or dark mode. Lifetime: 1 year. Optional — if you clear it, the site falls back to your operating-system preference.
• bandmate_filters — Remembers your last set of directory filters (city, genre, instrument) so the results page opens in the same state on your next visit. Lifetime: 30 days. Optional.

Cookies set by our infrastructure

A small number of infrastructure providers set cookies on the bandmate.co domain as part of how they serve content. These cookies are required for the service to function and are not used to track you across other sites.

• cf_clearance (Cloudflare) — A bot-management token. Lifetime: 30 days. Required if you are behind a Cloudflare edge node.
• AWSALB / AWSALBCORS (Amazon Web Services) — Load-balancer stickiness cookies. Lifetime: 7 days. Required for sticky sessions on the API.

Cookies we never set

Bandmate does not use Google Analytics, Meta Pixel, TikTok Pixel, or any other advertising-cookie vendor on the public site. We do not sell or rent behavioral data to third parties. Our anonymous server logs are used only to debug and improve the service; they are not joined to your account.

How to opt out

Most browsers let you block or delete cookies from settings. Blocking all cookies will prevent you from signing in — Bandmate needs at least the session and CSRF cookies for the site to work. If you want to keep the site working but clear optional preferences (theme, filter memory), open your browser's cookie-list view and delete the specific bandmate_* entries while leaving bandmate_session and bandmate_csrf in place.

For browser-level instructions, see the documentation for your browser:

• Chrome — chrome://settings/cookies
• Firefox — Preferences → Privacy & Security → Cookies
• Safari — Preferences → Privacy → Manage Website Data
• Edge — edge://settings/cookies

Changes to this Cookie Policy

If we add a new cookie to the site, we update this page first. Material additions are also announced in the same email we send when we update the Terms of Service. Minor edits — fixing a typo, clarifying a description — ship without a separate notice.

Questions about this Cookie Policy? Email privacy@bandmate.co.