1. What cookies are
Cookies are small files that a website saves in your browser. Some websites also use the browser's “local storage” (localStorage and sessionStorage), which works in a similar way. Below is everything we save, why and for how long.
2. In short
We group cookies into three categories, the same ones you see in the cookie banner:
- Necessary: always on. Without them, signing in, form protection and remembering your choices would not work. The law does not require consent for them (art. 4(5) of Romanian Law 506/2004 and art. 5(3) of Directive 2002/58/EC).
- Statistics: only with your consent. Google Analytics 4 shows us, in aggregate, how many people visit the site and which pages they read.
- External media: only with your consent. YouTube, SoundCloud, Mixcloud, Spotify, Apple Music and Deezer players, which may set their own cookies.
We do not use advertising cookies: no Meta (Facebook) Pixel, Google Ads, TikTok Pixel or any other ad-tracking tool.
3. Necessary (always on)
Cookies:
- __Secure-next-auth.session-token (or next-auth.session-token)
- Keeps you signed in (courses, DJ Tools, DJ School, artist portal).
- How long it stays: Until you sign out; at most 30 days (12 hours if you don't tick “Stay signed in”)
- __Host-next-auth.csrf-token (or next-auth.csrf-token)
- Protects the sign-in forms against CSRF attacks.
- How long it stays: Until you close the browser
- __Secure-next-auth.callback-url (or next-auth.callback-url)
- Takes you back to the page you started from after signing in.
- How long it stays: Until you close the browser
- __Secure-next-auth.pkce.code_verifier and __Secure-next-auth.state (or without __Secure-)
- Only when signing in with Google: ties the sign-in request to Google's response, so nobody can intercept or forge the sign-in.
- How long it stays: 15 minutes
- pa_mfa
- Privilege team only: shows that you passed the second sign-in step (the code from your authenticator app) in the current session.
- How long it stays: Until you sign out; at most 30 days
- pa_consent
- Remembers what you chose in the cookie banner, so we don't ask on every visit.
- How long it stays: 180 days
- pa_student_view
- Privilege team only: previewing courses as a student.
- How long it stays: 8 hours
- pa_staff
- Event staff only: the session in the ticket-scanning app.
- How long it stays: 20 hours
- pa_signup_consent
- Only when signing up with Google: keeps your ticked choices (age and news emails) until sign-up finishes.
- How long it stays: 10 minutes
- sidebar:state
- Privilege team only: remembers whether the admin menu is open.
- How long it stays: 7 days
| Name | What it does | How long it stays |
|---|---|---|
| __Secure-next-auth.session-token (or next-auth.session-token) | Keeps you signed in (courses, DJ Tools, DJ School, artist portal). | Until you sign out; at most 30 days (12 hours if you don't tick “Stay signed in”) |
| __Host-next-auth.csrf-token (or next-auth.csrf-token) | Protects the sign-in forms against CSRF attacks. | Until you close the browser |
| __Secure-next-auth.callback-url (or next-auth.callback-url) | Takes you back to the page you started from after signing in. | Until you close the browser |
| __Secure-next-auth.pkce.code_verifier and __Secure-next-auth.state (or without __Secure-) | Only when signing in with Google: ties the sign-in request to Google's response, so nobody can intercept or forge the sign-in. | 15 minutes |
| pa_mfa | Privilege team only: shows that you passed the second sign-in step (the code from your authenticator app) in the current session. | Until you sign out; at most 30 days |
| pa_consent | Remembers what you chose in the cookie banner, so we don't ask on every visit. | 180 days |
| pa_student_view | Privilege team only: previewing courses as a student. | 8 hours |
| pa_staff | Event staff only: the session in the ticket-scanning app. | 20 hours |
| pa_signup_consent | Only when signing up with Google: keeps your ticked choices (age and news emails) until sign-up finishes. | 10 minutes |
| sidebar:state | Privilege team only: remembers whether the admin menu is open. | 7 days |
Browser local storage:
- pa_lang
- Your chosen language (Romanian or English).
- How long it stays: Until you clear it in your browser
- pa-quiz-anon
- A random code that remembers your progress on quizzes solved without an account and links it to your account, if you create one. It contains no data about you.
- How long it stays: Until you clear it in your browser
- pa-ear-trainer
- Your best scores in the DJ Tools Ear trainer, so you can see your progress. It contains no data about you.
- How long it stays: Until you delete it from the browser
- pa-player-volume
- The volume you chose in the DJ Tools Playlist generator player. It contains no data about you.
- How long it stays: Until you delete it from the browser
- pa-player-platform
- The streaming platform you chose in the Playlist generator player (Spotify, Apple Music or Deezer), so tracks start there. It contains no data about you.
- How long it stays: Until you delete it from the browser
- pa-player-mix
- The length of the automatic mix between tracks in the Playlist generator player. It contains no data about you.
- How long it stays: Until you delete it from the browser
- installAppHidden
- Remembers that you hid the “Install the app” card.
- How long it stays: Until you clear it in your browser
- promo-…-closed (sessionStorage)
- Remembers that you closed the promo bar.
- How long it stays: Until you close the tab
- pa_seen_<artist> (sessionStorage)
- Counts your visit to an artist page only once, so reloads don't inflate the statistics. It contains no data about you.
- How long it stays: Until you close the tab
- admin-menu-closed and other interface preferences
- Privilege team only: the state of the admin panel menus.
- How long it stays: Until you clear it in your browser
| Name | What it does | How long it stays |
|---|---|---|
| pa_lang | Your chosen language (Romanian or English). | Until you clear it in your browser |
| pa-quiz-anon | A random code that remembers your progress on quizzes solved without an account and links it to your account, if you create one. It contains no data about you. | Until you clear it in your browser |
| pa-ear-trainer | Your best scores in the DJ Tools Ear trainer, so you can see your progress. It contains no data about you. | Until you delete it from the browser |
| pa-player-volume | The volume you chose in the DJ Tools Playlist generator player. It contains no data about you. | Until you delete it from the browser |
| pa-player-platform | The streaming platform you chose in the Playlist generator player (Spotify, Apple Music or Deezer), so tracks start there. It contains no data about you. | Until you delete it from the browser |
| pa-player-mix | The length of the automatic mix between tracks in the Playlist generator player. It contains no data about you. | Until you delete it from the browser |
| installAppHidden | Remembers that you hid the “Install the app” card. | Until you clear it in your browser |
| promo-…-closed (sessionStorage) | Remembers that you closed the promo bar. | Until you close the tab |
| pa_seen_<artist> (sessionStorage) | Counts your visit to an artist page only once, so reloads don't inflate the statistics. It contains no data about you. | Until you close the tab |
| admin-menu-closed and other interface preferences | Privilege team only: the state of the admin panel menus. | Until you clear it in your browser |
The necessary category also covers the Bunny video player (course videos) and the YouTube videos on artist pages, loaded in “privacy-enhanced” mode (youtube-nocookie.com). They are needed to show you the content you asked for.
4. Statistics (only with your consent)
- _ga, _ga_<ID>
- Google Analytics 4: tells visitors and sessions apart, so we can see in aggregate how many visits the site gets and which pages are read. Provider: Google LLC, USA, under the EU-US Data Privacy Framework.
- How long it stays: Up to 2 years
| Name | What it does | How long it stays |
|---|---|---|
| _ga, _ga_<ID> | Google Analytics 4: tells visitors and sessions apart, so we can see in aggregate how many visits the site gets and which pages are read. Provider: Google LLC, USA, under the EU-US Data Privacy Framework. | Up to 2 years |
5. External media (only with your consent)
The YouTube player in Privilege Academy lessons (youtube.com) the SoundCloud and Mixcloud widgets and, in the DJ Tools Playlist generator player, the Spotify, Apple Music and Deezer players. When you enable them, their providers may set their own cookies and see your IP address, under their own privacy policies. Without your consent, these players are not loaded.
6. Payments
Payments are made on the secure EuPlătesc page, which uses its own cookies to process the payment.
7. How to change your choice
You can change what you accepted at any time through the “Cookie settings” link in the site footer. If you withdraw consent, those tools are no longer loaded; cookies already saved can be deleted in your browser settings.
You can also delete or block cookies and local storage in your browser settings. If you block necessary cookies, signing in to your account will no longer work.
8. Contact
Questions: contact@privilegeagency.eu. Details about personal data are in our Privacy Policy.