Cookie policy

Cookies are small files a website saves in your browser. Other technologies do the same job — the browser's local storage and its IndexedDB database — and the same rules apply to them, so they are all listed here.

All of it is ours and set by myconcertwall.com; none of it is shared with, or read by, anyone else.

• __Secure-authjs.session-tokenCookie

  Keeps you signed in. It is signed and encrypted; without it you would sign in on every visit.

  30 days

• __Host-authjs.csrf-tokenCookie

  Security: checks that sign-in forms come from this site and not from another one.

  Until the browser is closed

• __Secure-authjs.callback-urlCookie

  Remembers which page to return to after signing in.

  Until the browser is closed

• __Secure-authjs.state, __Secure-authjs.pkce.code_verifierCookie

  Only when signing in with Google: they protect the round trip to Google so no one can step in between.

  15 minutes

• mcw_inviteCookie

  Keeps the code of the invitation you arrived with until your account is created.

  24 hours

• mcw_confirmCookie

  Remembers which address the confirmation link was sent to, so it can be sent again.

  24 hours

• app-conciertos:v1…IndexedDB

  A copy of your wall in this browser, so it opens at once and works offline; changes made offline wait here until they reach your account.

  Until you clear the site's data

• app-conciertos:geo:v1IndexedDB

  Coordinates of cities already looked up, for the map and the distances.

  Until you clear the site's data

• mcw:panel-open:v2, mcw:panel-collapsed, mcw:tour-doneLocal storage

  Your screen preferences: which block of the concert panel you left open, whether the panel is folded and whether you have seen the guided tour.

  Until you clear the site's data

Spanish law (article 22.2 of the LSSI) and the Spanish Data Protection Agency's cookie guide exempt from consent the storage that is strictly necessary to provide a service you asked for: keeping you signed in, security, and settings you chose yourself. Everything above falls there. If we ever add something that does need your consent — analytics, for instance — we will ask before it runs, with the same ease to accept or reject, and this page will say so.

If you choose to sign in with Google, you go to google.com for a moment; any cookies Google sets there are Google's, on its own site, and are governed by Google's policy. My Concert Wall does not load any Google script on its pages.

Signing out removes the session cookies. To remove everything, delete the site's data from your browser's settings (in Chrome: Settings → Privacy and security → Third-party cookies → See all site data and permissions → myconcertwall.com). Blocking these cookies stops you from signing in. Your wall is not lost: if you have an account it lives there, and the copy in the browser is rebuilt the next time you sign in.

Write to hello@myconcertwall.com. How we handle your personal data is explained in the privacy policy.