Cookie Policy

Every cookie and storage technology Artistover uses, what each is for, and how your consent choice changes what runs.

Version 2.1 · Effective 13 September 2026

The official legal document is provided in English.

Artistover is operated by Artistover Limited, a company registered in England and Wales with company number 17285593, whose registered office is at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.

This policy lists what Artistover stores on your device and why. It covers cookies and the equivalent technologies: local storage, session storage and server-side identifiers. Read it alongside our Privacy Policy.

1. Your choice, and what it changes

When you first visit we ask separately whether to allow analytics and advertising measurement. Declining is exactly as easy as allowing: both are single buttons of the same size, side by side. Everything on Artistover keeps working either way, and nothing optional is stored on your device unless you say yes.

The difference each choice makes is set out below, because it is not simply on and off.

Before you choose: optional analytics and advertising measurement are off. You can browse and join the waitlist without accepting either.
If you allow analytics: PostHog measures public page views and selected actions. Artistover records browsing session identifiers, campaign sources and whether a session led to a new waitlist signup. Session replay and automatic text or form capture are disabled on the launch website. Admin and private pages are excluded.
If you decline: analytics stops entirely, and any analytics identity already held for you is cleared.

Your choice is remembered in browser local storage for up to one year so we do not ask again. You can change it whenever you like using the Cookie settings link in the footer of any page.

2. Essential cookies

These are required for the platform to work. They cannot be switched off, because without them you could not sign in, stay signed in, or be kept secure.

Sign-in session: keeps you signed in between pages and visits. Set by our authentication provider.
ao_auth_intent_nonce and ao_auth_resume: hold the sign-in attempt securely while you complete it, and return you to the page you started from. Short-lived.
cookie_consent: records your separate analytics, advertising and functional preferences in local storage. Valid for up to one year.
ao_event_access_attempt, ao_event_access_pending and ao_event_access_sessions: let a guest open an event they were invited to, and hold that access securely. Used only on event access links.
ao_waitlist: records verified waitlist access where that applies to your account.
ao_impersonate: set only when an Artistover administrator is accessing an account to provide support. Never set during ordinary use.
Security and rate limiting: request protection identifiers, handled server-side rather than stored on your device.

3. Functional cookies

These remember something you did so the product behaves sensibly. They are not used to build a profile of you.

ao_referral: records the referral code you arrived with, so the person who referred you is credited correctly.
ao_supply_pipeline: records the context you arrived from when joining as a provider.
Interface preferences and form drafts: held in your browser storage so a half-completed listing or event is not lost. This stays on your device.

4. Analytics

We use PostHog, hosted in the European Union, to understand which parts of the product are used and where people get stuck. Advertising measurement is separate and described below.

On the launch website, PostHog receives public page paths and selected events, without query strings, email addresses, private page contents or session recordings. ao_marketing_session_v1 is stored in session storage and uses a 30-minute inactivity window. ao_marketing_attribution_v1 remembers first and last non-direct campaign sources for up to 30 days, only with analytics or advertising consent.

If you allow analytics and AI observability is enabled, PostHog may also receive the prompt and response from an Artistover AI feature so we can investigate quality, failures and which suggestions help. This is separate from session recording and is retained for up to 30 days.

Analytics respects a Do Not Track signal from your browser.

5. Third parties that set cookies

A small number of services we rely on set their own cookies when you use the part of the product they power.

Stripe: payment processing and fraud prevention. Sets cookies necessary for secure payment, and is subject to its own privacy policy.
Supabase: authentication and session management. Sets the sign-in session cookie described above.
PostHog: product analytics and AI observability, as described above. Session replay is disabled on the launch website. It stores nothing on your device unless you allow analytics.
Mapbox and OpenStreetMap: map display and address lookup on pages that show a map.

With separate advertising consent, Meta Pixel measures public page views and new waitlist signups for our Facebook and Instagram ads. Meta may use this data to match activity to its users and measure or improve advertising. Its _fbp browser identifier and _fbc ad-click identifier are only accessed after advertising consent. The _fbc identifier we set expires after 30 days; Meta controls its own cookie expiry. When server-side delivery is enabled, the same signup event ID is used to avoid counting it twice; a SHA-256 hashed email and consented advertising identifiers may be shared with Meta. Hashing does not make personal data anonymous. No historical waitlist emails are uploaded by this integration. See Meta’s privacy policy at https://www.facebook.com/privacy/policy/.

6. Preview environments

Our internal preview site sets an additional access cookie, ao_dev_access, to control who can view unreleased work. It is not set on artistover.com and does not affect anyone using the live product.

7. Changing your mind

Use the Cookie settings link in the footer of any page to change your choice at any time. Declining after previously allowing stops the relevant future collection and clears the optional browser identifiers. Previously collected records are not automatically erased; contact us to exercise your data rights.

You can also block or delete cookies in your browser settings. Blocking essential cookies will stop you being able to sign in, stay signed in, or complete a booking.

Your browser Do Not Track setting is respected by our analytics.

8. Changes to this policy

We update this policy when the technologies we use change. The version and effective date at the top tell you which version you are reading.

9. Contact

Questions about cookies can be sent to privacy@artistover.com.