Cookies & privacy choices

Essential storage

Supabase authentication and security controls use essential cookies and short-lived abuse-prevention keys. They are required for the requested service and are not used to build an advertising profile.

When you unlock content on a release page (by pre-saving or joining the artist's list), a functional cookie remembers that this browser unlocked it, so the reward is still there when you come back. It names only that unlock, is read only by that page, lasts 180 days and is never used for analytics or advertising.

Optional categories

• First-party analytics — page views, link events, coarse device/country, referrer hostname, and redacted campaign attribution. Uses no cookie and stores no visitor identifier or IP address; counted unless you opt out (or send Global Privacy Control); retained up to 90 days.
• Approved marketing integrations — browser and server events for a workspace's approved provider. Off until accepted, blocked by Global Privacy Control, and retained in the delivery log up to 30 days.

Embedded players

Spotify, Apple Music, and YouTube players on artist pages load only when you select Play here. Those services may then set their own cookies under their own policies; duu.to does not receive or control them. Until you select it, nothing is loaded from those services.

Change or withdraw

On a public duu.to page, select Privacy choices at the lower left. You can reject all optional categories, select them independently, or withdraw a previous choice. Withdrawal revokes the active receipt and prevents queued marketing delivery.

For the complete inventory and provider information, read the Privacy Policy.