Cookie Policy
Essential cookies: an httpOnly session cookie that holds a Sanctum token after you sign in, and a short-lived httpOnly ticket token after checkout so the confirmation page can show your QR. These are not analytics.
Analytics (PostHog) load only after you accept the cookie banner, and we set sp_analytics so our servers know you accepted. Reject analytics and nothing is sent, from your browser or our servers.
Location: if you choose Use my location on the home page, or give a location while setting up your account, a cookie named sp_loc keeps that point, rounded to about a kilometer, with the place name you saw and a random number that keeps the featured events in the same order. It lasts a year, our server reads it to show events near you, and it is removed when you press Change beside it or sign out.
Analytics choice: if you accept analytics, a cookie named sp_analytics holds the number 1 so our servers know you said yes. It is not set if you reject analytics. It lasts 400 days and is renewed each time you visit, and signing out leaves it, because the choice belongs to this device rather than to your account.