Cookie Policy

1. What are Cookies?

Cookies are small text files that websites store on your device. They help save your settings and keep you logged in.

In addition to cookies, we also use similar technologies such as Local Storage and Session Storage, which are also covered in this policy.

2. Types of Cookies

We distinguish between different types of cookies:

By Origin:

First-party cookies: Set by BassBench itself
Third-party cookies: Set by external services (e.g., Supabase for authentication)

By Duration:

Session cookies: Deleted when you close the browser
Persistent cookies: Stored for a defined period

3. Essential Cookies

These cookies are strictly necessary for the operation of BassBench and cannot be disabled. We use only essential cookies – no analytics or advertising cookies.

3.1 Authentication (Supabase)

Cookie	Purpose	Duration
sb-*-auth-token	Maintains your login session	Session / Persistent
sb-*-auth-token-code-verifier	PKCE authentication flow	Session

3.2 Functional Cookies (BassBench)

Cookie	Purpose	Duration
geo-country	Country code for displaying the appropriate currency on the pricing page	1 hour
sidebar_state	Stores the sidebar state (open/closed)	7 days
oc_ok	Auth performance cache (prevents redundant database queries on every page view)	1 hour
ob_done	Onboarding completion marker for middleware routing logic	2 minutes

Legal basis: § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) – no consent required as these cookies are strictly necessary for operation.

4. Third-Party Services & Consent

The following third parties are integrated. Essential services are loaded without consent; for YouTube we collect your consent in advance:

Supabase (Authentication)

We use Supabase for user authentication. This sets the essential authentication cookies listed above.

Provider: Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992
Privacy: supabase.com/privacy

YouTube (Video Embedding)

BassBench embeds YouTube videos for song playback. Before a video is loaded, we ask for your consent. Only after you click "Allow & load video" will the YouTube IFrame API be loaded — at which point YouTube may set its own cookies to operate the player and collect usage statistics.

Your consent is stored in your browser's Local Storage under (yt_consent) and remains valid until you revoke it. You can revoke consent at any time by clearing the browser storage for this site.

Provider: Google LLC / YouTube
Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG
Privacy: policies.google.com/privacy

5. Cookie Management

For essential cookies (authentication, UI preferences) no consent is required. For YouTube videos we ask directly in the player for your permission before the YouTube API is loaded.

You can manage cookies and local storage entries through your browser settings:

Chrome: Settings → Privacy and Security → Cookies
Firefox: Settings → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Cookies and site permissions

Note: Blocking essential cookies will prevent you from logging in to BassBench.

6. Legal Basis

The use of cookies is based on the following legal ground:

Essential cookies: § 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(b) and (f) GDPR — no consent required, as strictly necessary for technical operation and contract performance
YouTube videos: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR — consent required; collected before the player is loaded

Should we introduce additional cookies (e.g., analytics cookies) in the future, we will update this policy accordingly and obtain your consent.

Questions about cookies?

Summary