Cookie Notice
Every cookie we set, and how to turn advertising cookies off · Last updated 25 October 2026
Cookies we set
All of these are strictly necessary for the service to work. Apart from wp_consent (your answer about advertising cookies), none can be read by scripts on the page, and on our site they are sent only over HTTPS.
| Name | What it does | How long |
|---|---|---|
session | Keeps you signed in. Set when you log in. | How long: Ends after 3 days without use, and at the latest 30 days after you signed in (8 hours for our own staff). |
wp_kd | Remembers that this browser has signed in to your account before, so wrong password guesses by someone else do not lock you out. It holds a scrambled code, never your email address. | How long: 180 days. |
wp_welcome | Set when you sign up: the name and email you typed, so the next screen can show them. | How long: 1 hour. |
session (at sign-up) | Every sign-up gets the same screen, so the page never reveals whether an address already has an account. If it does, this browser gets a stand-in session cookie that signs nobody in. | How long: Like the session cookie above. |
g_oauth | Only if you use “Continue with Google”: finishes the Google sign-in safely. | How long: 10 minutes, deleted once used. |
login_code | Only for our own staff: finishes a sign-in with an emailed code. | How long: 10 minutes. |
wp_consent | Remembers your answer about advertising cookies (yes or no), so we don’t ask again and a “no” is kept. The page itself reads it. | How long: 12 months. |
Advertising cookies (Meta Pixel)
We use the Meta Pixel, from Meta Platforms (Facebook and Instagram), to see which of our ads bring people to Who Played. It runs only on our home page, the pricing page, the sign-up page and the plans page (and once on the first page after you sign up, to count the sign-up), never on the pages of your account, your tracks, your plays or the DJs you send to. It tells Meta that a page was visited, that someone signed up, opened the payment page or paid (with the plan and the price), along with the browser’s own details, such as the IP address and the browser type. It never sends your name, your email address, your tracks or any DJ.
In the EU, the EEA, the UK and Switzerland (and wherever we can’t tell where you are), it loads only after you press Accept on our cookie banner. Everywhere else it is on unless you turn it off here; you can do that at any time, and the “Cookie settings” link at the bottom of every page brings you back to this switch.
| Name | What it does | How long |
|---|---|---|
_fbp | Set on our site by the Meta Pixel: a random ID for this browser, so Meta can tell that a visit, a sign-up or a purchase came from one of our ads. | How long: About 90 days, renewed on each visit with the pixel. |
fr | Set by Meta on facebook.com, not by us, if you use Facebook or Instagram in this browser: Meta’s own advertising cookie. | How long: About 90 days (Meta decides). |
wp_px_signup | Set by us right after a sign-up, only when advertising cookies are on: tells the next page to count the sign-up once. | How long: 10 minutes, deleted once used. |
Advertising cookies are on in this browser. Where you are they are on unless you turn them off.
Turning them off stops the pixel and deletes _fbp from this browser. Meta’s own fr cookie lives on facebook.com: your Facebook or Instagram ad settings, or your browser, can delete it. How Meta uses this data: Meta Privacy Policy.
Browser storage
A few small settings are kept in your browser’s own storage: wp-theme and wp-landing, your light or dark choice for the app and for this site, and, after a payment, a note that it was already counted for our ads, so a reload doesn’t count it twice. They stay on your device and are never sent to us.
Other companies
Cloudflare Turnstile, the “are you human” check, runs on the sign-up, For DJs, artists and venues and forgotten password pages. It is run by Cloudflare and sees your IP address and browser details, only to stop bots.
Meta: the advertising cookies above.
Stripe (payments) and Google (if you choose to sign in with Google) set their own cookies on their own sites when you go there; their cookie notices apply to those.
What we do not use
No analytics cookies and no analytics tools. Apart from the Meta Pixel above, no advertising cookies, no other tracking pixels and no other third-party scripts that follow you around.
If that changes
If we add any other optional cookies, we will ask first where the law requires it and update this page. Questions: hello@whoplayed.me.
Last updated 25 October 2026