Cookie Policy

The short version

All Together Now sets two cookies, and neither one tracks you. One keeps you signed in; the other remembers the choice you made about cookies. We run no analytics cookies, no advertising cookies, and no third-party scripts on our public pages.

What a cookie is

A cookie is a small piece of text a website asks your browser to keep and send back on your next visit. It is how a site can tell that the person loading a page is the same person who signed in a moment ago.

The cookies we set

Essential — always active

These are required for the site to work at all, so they are not optional. They carry no advertising or profiling data.

• PHPSESSID — your session. It is what keeps you signed in as you move between pages, and it holds the token that protects forms against cross-site request forgery. It is marked HttpOnly (JavaScript cannot read it), Secure (sent only over HTTPS) and SameSite=Lax. It expires when your session ends.
• cookie_consent — the choice you make in the cookie banner, so we do not ask again on every page. It stores one word: whether you accepted analytics or chose essential only. It lasts one year, and you can change it at any time.

Analytics — off unless you turn it on

Nothing currently uses this category. We are telling you it exists because we would rather have the switch in place before we need it than add measurement first and ask afterwards. If we add first-party usage analytics — the kind that counts page views to tell us which parts of the app people actually use — it will run only if you have turned this on, the data will stay on our own servers, and we will not sell it or hand it to an advertising network.

Cookies we do not set

• No advertising or retargeting cookies.
• No social media pixels or share-button trackers.
• No Google Analytics or comparable third-party analytics.
• No cross-site profiling of any kind.

When another company's cookies apply

Two parts of the service hand you over to someone else, and on their pages their rules apply rather than ours:

• Payments. Paid plans are handled by Stripe. When you go to pay, you are on Stripe's own checkout page, and Stripe sets its own cookies there to run the payment and prevent fraud. We never see your card details. See Stripe's cookie policy.
• Links out. If you follow a link from a message or an email to another site, that site's own cookie policy governs what happens there.

Changing your mind

Use the Cookie preferences link in the footer of any page to reopen the banner and change your choice. You can also delete cookies in your browser's settings at any time — though clearing the essential ones will sign you out and make the banner ask again.

Recordings are not cookies

Audio you record, the projects you build and the people you invite are handled under our Privacy Policy, not this page. Cookies here are only about how your browser and our server recognise each other between page loads.

Questions

If something here is unclear or looks wrong, tell us through the contact form and we will fix the page.