This Cookie Policy explains how Hummify ("we", "us", or "our") uses cookies and similar technologies on our website and platform (the "Service"). It should be read together with our Privacy Policy, which explains how we handle personal data more broadly.
2. What are cookies and similar technologies
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, to keep them secure, and to provide information to the site owner.
We also use technologies that work in a similar way, including:
Local storage and session storage: Browser storage mechanisms used to remember your settings and choices (for example, whether you have accepted analytics cookies).
Authentication and CDN cookies: Cookies used by Supabase and AWS CloudFront to authenticate you, maintain your session, and deliver content securely.
Cookieless identifiers: In some cases, our analytics providers may generate non-cookie identifiers derived from incoming requests to measure usage in a privacy-preserving way.
3. Types of cookies we use
3.1 Strictly necessary cookies
These cookies and similar technologies are essential for the operation of the Service and cannot be switched off in our systems. They are usually set only in response to actions you take that amount to a request for services, such as logging in, navigating between pages, or configuring your workspace.
We use them to:
Authenticate you and maintain your session.
Provide secure access to projects, shares, and assets.
Deliver audio and other media via our CDN.
Protect against fraud and unauthorised access.
Because these technologies are strictly necessary for the Service, they are set on the basis of contractual necessity and legitimate interests, and we do not request your consent for them.
3.2 Preference cookies and local storage
Preference cookies and local storage entries remember your choices and settings so that you do not need to reconfigure them on each visit.
We use them to, for example:
Remember interface and UI preferences.
Remember whether you have dismissed our cookie banner.
Store your analytics consent choice (accepted or declined) so we can respect it on subsequent visits.
3.3 Analytics and performance cookies
With your consent, we use analytics and session replay tools to understand how the Service is used and to improve performance and usability.
These technologies may collect information such as page views, navigation paths, feature usage, performance metrics, and interaction patterns. In some cases, session replay tools record an anonymised or masked representation of your interactions with the interface to help us reproduce issues and improve user experience.
We only enable these tools after you have provided consent via our cookie banner or in-product settings. You can withdraw your consent at any time.
4. Details of key cookies and technologies
4.1 Authentication and core service
Supabase auth cookies: Used to authenticate users, maintain login sessions, and secure access to accounts and projects. These cookies are essential for using the Service.
AWS CloudFront cookies and tokens: Used to deliver audio and media securely via our content delivery network and to enforce access controls around media URLs. These are necessary for secure streaming and content protection.
Preference storage: Local storage or similar mechanisms used to remember your preferences (including whether you have accepted or declined analytics).
4.2 Analytics and session replay
PostHog analytics and session replay: Used, with your consent, to measure how features are used and to capture masked session replays for debugging and UX improvement. We configure PostHog to mask text inputs and other sensitive content. Session replay data is typically retained for up to 30 days.
Vercel Web Analytics: Used, with your consent, to capture high-level metrics such as page views, referrers, and performance statistics for our public site and marketing pages. This helps us understand which pages are visited and how the site performs.
We do not use advertising networks, marketing pixels, or third-party tracking cookies for behavioural advertising.
5. Legal basis
Our legal basis for using cookies and similar technologies depends on their purpose:
Strictly necessary cookies and technologies: We rely on contractual necessity (to provide the Service you request) and legitimate interests (to secure and maintain the platform).
Preference cookies and local storage: We rely on legitimate interests to remember your settings and to honour your choices regarding analytics and cookies.
Analytics and session replay tools: We rely on your consent. These tools are only enabled after you have accepted analytics via our cookie banner or other settings, and you may withdraw your consent at any time.
6. How to manage your choices
You have several options for managing cookies and similar technologies:
Cookie banner: On your first visit to our public site, you can choose whether to accept or decline analytics. Your decision will be stored so you are not asked on every visit.
In-product controls (where available): If we provide settings within the Service to update your cookie or analytics preferences, you can use those to adjust your choices at any time.
Browser controls: Most browsers allow you to block or delete cookies, or to configure settings for individual sites. If you block strictly necessary cookies, some parts of the Service may not function correctly (for example, you may not be able to log in or access your projects).
Clearing storage: You can clear cookies and local storage for our domain in your browser settings if you want to reset your choices and be prompted again.
7. Changes to this policy
We may update this Cookie Policy from time to time, for example to reflect changes in the cookies and technologies we use or in applicable law. The effective date at the top of this page shows when it was last updated. If we make material changes, we may provide additional notice through the Service.
8. Contact
If you have any questions about this Cookie Policy or our use of cookies and similar technologies, you can contact us at: