Cookies Policy

Last Updated: October 9, 2026

1. Introduction

This Cookies Policy explains how SingArena ("Platform", "we", "us", or "our") uses cookies and similar tracking technologies when you access or use our platform, including our website, web applications, mobile applications (Android via Capacitor), and desktop applications (Windows, macOS, Linux via Electron). This Policy should be read in conjunction with our Privacy Policy, which provides further details about how we collect and use your personal data.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet, or other device) when you visit a website or use a web application. Cookies are widely used to make websites and applications work more efficiently, to provide a better user experience, and to provide information to the operators of the site or application.

Cookies may be set by the website or application you are visiting ("first-party cookies") or by third parties whose services are integrated into the site or application ("third-party cookies"). Cookies may persist for varying durations: "session cookies" are automatically deleted when you close your browser, while "persistent cookies" remain on your device until they expire or are manually deleted.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of the Platform. They enable core functionality such as user authentication, session management, security features, and access control. Without these cookies, the Platform cannot function properly. These cookies do not require your consent.

3.2 Functional Cookies and Storage

These cookies and storage entries enable enhanced functionality and personalization, such as remembering your language preferences (16 supported languages), theme settings (light/dark mode), audio player preferences, equalizer profile, visualizer mode, home screen wallpaper, dashboard tile layout, and other customization choices. While the Platform can function without them, your experience may be less personalized.

3.3 Performance and Analytics Cookies

These cookies and identifiers collect information about how you use the Platform, including which pages you visit, which features you use, stream events (≥60s qualified plays), karaoke session counts, conversion events, viral tracking events (recording and duet shares), and whether you encounter any errors. This information is used to improve the Platform's performance and recommend content. Aggregate analytics do not identify individual users outside of internal systems.

3.4 Advertising Cookies

For users on the Free Plan, advertising cookies and identifiers may be set by our advertising partners (Google AdSense and Google AdMob) to serve relevant advertisements and to measure the effectiveness of ad campaigns. These cookies collect information such as advertising identifiers and interaction data. Premium subscribers (€4.99/month) are not served advertisements and will not encounter advertising cookies. You can manage your advertising preferences through your device settings and Google's Ad Settings.

3.5 Third-Party Cookies and Services

Certain third-party services integrated into the Platform may set their own cookies or process technical identifiers. These include:

• Lovable Cloud (Supabase): Authentication, database (PostgreSQL with RLS), realtime subscriptions, edge functions and storage signed URLs.
• Cloudflare R2: Media storage and content delivery (audio, recordings, avatars, post images).
• Stripe: Payment processing for Premium subscriptions; Stripe sets its own cookies on payment pages.
• Google AdSense / AdMob: Advertising on the Free Plan.
• Metered.ca: WebRTC TURN/STUN servers for 1:1 voice calls.
• OAuth providers: Google, Facebook, X (Twitter), Instagram for authentication.
• AI providers: Lovable AI Gateway, DeepSeek, Google Gemini and OpenAI for moderation, translations, blog generation and image moderation. Requests are anonymised at the application layer where possible.
• ElevenLabs / LRCLIB: Lyrics synchronisation and lyrics retrieval for karaoke.
• YouTube IFrame API: Loaded only on the Sing Along page; subject to YouTube's own cookie practices.
• Resend: Transactional and notification emails (no in-page cookies).

We do not control the cookies set by third parties; please refer to their respective privacy and cookies policies.

4. Similar Technologies

In addition to cookies, we use the following similar technologies:

• Local Storage: Application state, user preferences (theme, language, wallpaper, tile layout, equalizer profile), referral tracking codes, dismissed banners, cached lookup data, and Stage Feed playback hints.
• Music & Discovery Preferences: Recently played tracks, recently browsed genres, Explore section state, and personalised recommendation hints.
• Session Storage: Temporary form state, multi-step onboarding progress and navigation context for a single browser session.
• IndexedDB: Cached audio for offline playback (where permitted), local user playlists, and downloaded content metadata.
• Web Push (VAPID): If you enable push notifications, your browser stores a push subscription identifier and we store the corresponding endpoint server-side to deliver call alerts and other notifications. You can revoke this at any time in your browser/system settings.
• Service Worker cache: The PWA service worker caches static assets and selected media to improve performance and enable a basic offline experience.
• Capacitor (Android) and Electron (Windows/macOS/Linux): Native wrappers may use platform-specific secure storage for the authentication session and a system advertising identifier on Free Plan.
• Chat & Composer Drafts: DM message drafts and Story/Reel composer state are auto-saved to LocalStorage so you can resume where you left off. Cleared when you send or explicitly discard.
• Link Preview Cache: Open Graph metadata for links shared in GoRefuge posts is cached server-side for up to 7 days to reduce repeat fetches; no per-user identifier is attached to that cache.
• Audio Calibration Profile: Your microphone latency offset (ms) is stored in your profile so the karaoke sync engine can compensate for Bluetooth/AirPods delay. No raw audio is ever stored.
• Soundcheck Result Cache: The result of the pre-duel mic test is cached locally for ~30 minutes to avoid re-prompting; the underlying audio is processed on-device only and never uploaded.
• Suggested-Friends & Onboarding Flags: A small set of "seen once" flags (e.g. suggested_friends_seen, daily-streak claim) is stored to prevent repeating one-time modals.

5. Your Choices and Control

5.1 In-App Cookie Consent

On your first visit, the Platform displays a cookie consent banner. Your choice is stored locally and can be reviewed or changed at any time from your account settings. Strictly necessary cookies are always active and cannot be disabled, as the Platform cannot function without them.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, block third-party cookies, alert you when a cookie is being set, or delete cookies when you close your browser. Please note that blocking or deleting cookies may impact the functionality of the Platform, and certain features may not work as intended.

For more information about managing cookies in your browser, visit:

• Chrome: chrome://settings/cookies
• Firefox: about:preferences#privacy
• Safari: Preferences → Privacy
• Edge: edge://settings/privacy

5.3 Mobile and Desktop Devices

On mobile devices, you can manage cookies and local storage through your device's browser settings or app settings. For native applications (Android via Capacitor, desktop via Electron), data storage is managed through the application's settings and your device's storage management features. You can manage your advertising identifier and opt out of personalized ads through your device's privacy settings (Android: Settings → Privacy → Ads).

5.4 Push Notifications

You can enable or disable web push notifications at any time in your browser/system permissions or via the Platform notification settings. Disabling push notifications removes the associated identifier server-side.

5.5 Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. As there is currently no universally accepted standard for interpreting DNT signals, the Platform does not currently respond to DNT signals. You can manage your tracking preferences using the cookie controls described in this Policy.

6. Data Collected Through Cookies

Data collected through cookies and similar technologies may include:

• IP address and approximate geographic location
• Browser type, version, and language
• Operating system, device type and platform (web, Android, desktop)
• Screen resolution and viewport size
• Pages visited, features used, and interaction patterns
• Date and time of visits
• Referring URLs and exit pages
• Authentication state and session information
• Push notification subscription identifiers (if enabled)
• Advertising identifiers (Free Plan users only)

For details about how we use this data, please refer to our Privacy Policy.

6a. Mobile App Storage (Android via Google Play)

The SingArena Android application, distributed through the Google Play Store, does not use traditional HTTP cookies. Instead, equivalent local-storage technologies are used inside the embedded web view (Capacitor / WebView):

• WebView LocalStorage / IndexedDB — stores authentication session, language preference, theme, cookie-consent decision, cached song metadata and offline data. This data lives in the app's private sandbox and is removed when you uninstall the app or clear app data in Android Settings.
• Capacitor Preferences (native key/value store) — stores small native settings such as push-notification opt-in, biometric-unlock flag, and last opened tab.
• Firebase Cloud Messaging (FCM) registration token — a device-bound identifier needed to deliver push notifications you have enabled (incoming calls, friend requests, messages). It is reset when you reinstall the app or revoke notification permission.
• Android Advertising ID (AAID) — used only for users on the Free Plan, solely by Google AdSense for ad personalization. You can reset or opt out of personalized ads in Android Settings → Privacy → Ads. Premium subscribers are not subject to AAID-based ad personalization on our app.
• Crash & performance diagnostics (Sentry) — anonymized crash reports tied to a per-install identifier; no advertising use.

We do not use device fingerprinting, SDK-based behavioural tracking, or any third-party analytics SDK that bypasses your in-app cookie/consent choices. To wipe all locally stored data on Android: Settings → Apps → SingArena → Storage → Clear data, or uninstall the app. To delete data stored on our servers, use Settings → Account → Delete Account inside the app, or visit singarena.com/account-delete.

7. Updates to This Policy

We may update this Cookies Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on the Platform with a revised "Last Updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy.

8. Contact

If you have any questions about this Cookies Policy or our use of cookies and similar technologies, please contact us at: info@singarena.com.