Cookie policy.

1. What are cookies?

Cookies are small text files that a browser stores on your device when you visit a website. They allow a site to recognize information across requests — such as your login session or preferred language.

We also use related technologies such as LocalStorage, SessionStorage and pixel tags. This policy treats all of them under the umbrella term "cookies".

2. Essential cookies (no opt-out)

Without these, the platform won't work — they store technically required information:

• NEXT_LOCALE: your language choice (DE / EN). Lifetime: 12 months.
• ogr_session: signed auth session token (HttpOnly, Secure, SameSite=Lax). Lifetime: 14 days, sliding.
• ogr_csrf: CSRF token for form POSTs. Lifetime: session.
• cookie_consent: your cookie consent state. Lifetime: 12 months.

3. Analytics (opt-in)

If you explicitly agree, we additionally use:

• Plausible (self-hosted, EU servers, no cross-site tracking) — anonymous traffic statistics.
• Firebase Analytics (Google Analytics 4) — app usage, conversion funnels, no IDFA / AAID tracking.

You can revoke your consent at any time via the cookie banner link in the footer.

4. Marketing and third-party cookies

Only with your explicit consent to the "Marketing" category do we use conversion tracking for ads:

• Google Ads conversion tag (Google Ireland Ltd.) — measures whether a click on a Google ad leads to a registration.
• OpenAI Ads measurement pixel (OpenAI, L.L.C., USA) — measures the same for ads in ChatGPT. Sets the __obref cookie (browser reference) and reads the oppref click parameter from the ad URL.
• Meta Pixel (Meta Platforms Ireland Ltd.) — measures page views and registrations for ads on Facebook and Instagram. Sets the _fbp and _fbc cookies and reads the fbclid click parameter from the ad URL.
• TikTok Pixel (TikTok Technology Ltd., Ireland) — measures the same for ads on TikTok. Sets the _ttp cookie and reads the ttclid click parameter from the ad URL.

Without marketing consent these scripts are not loaded and no such cookies are set. Details — including the server-side conversion events — are in the privacy policy (§8).

Embeds from Spotify, YouTube or Apple Music (e.g. on smart-link pages) only load on click and then follow the cookie policies of the respective providers. We point this out explicitly on the smart-link page.

5. Lifetime and deletion

Session cookies are deleted when you close the browser. Persistent cookies are removed automatically when their lifetime expires — but you can also delete them manually at any time in your browser settings.

After deletion, the platform will re-set essential cookies on your next visit; analytics cookies will not be set again until you opt in once more.

6. Your rights and choices

You can revoke analytics through the cookie banner at any time. In your browser, you can also block or selectively delete cookies — but we recommend doing so only for analytics, since blocking essential cookies will break login and language preferences.

Questions or GDPR Art. 15-22 requests should go to info@og-records.com.

Privacy request?

If you'd like access, deletion or portability of your data, email info@og-records.com. We respond within 30 days — usually much faster.

info@og-records.com