Cookie preferences and privacy
BCKSTG fires a small set of third-party scripts on public pages so artists can measure ad campaigns and so the platform team can see traffic patterns. We gate every one of those scripts behind a visitor's consent choice, which choice each visitor sees depends on where they're visiting from.
How it works by region
Visiting from the EU, UK, EEA, or Switzerland. You see a banner at the bottom of the screen the first time you arrive. Three options: Accept all, Reject non-essential, or Manage (per-category toggles). Nothing fires until you choose.
Visiting from anywhere else (incl. the US). No banner. Essential cookies + analytics + advertising trackers all fire by default. You can opt out anytime via the Cookie preferences link in the footer of any page.
Visiting with Global Privacy Control turned on. GPC is a browser-level "do not sell or share my data" signal (Brave sends it by default; Firefox and DuckDuckGo support it as a setting). When we see it, we silently honor it as an opt-out, no banner, no scripts fire. You can still flip individual categories on via Cookie preferences if you want.
Your explicit choice always wins over the regional default.
The three categories
- Essential, sign-in, security, language preference, theme, the things the site can't work without. Always on; can't be disabled.
- Performance, anonymous traffic analytics (Vercel Analytics) so we can see what's working.
- Advertising, Meta Pixel, TikTok Pixel, and any artist-owned pixels the artist has configured. Used for campaign attribution and retargeting.
Changing your mind
Click Cookie preferences in the footer of any BCKSTG page (homepage, your dashboard, a fan page, a landing page) to reopen the manage view at any time. Your previous choice stays in effect until you change it.
For artists running campaigns
The consent gate applies to your Meta / TikTok / GA pixels too, both the profile-wide ones in Integrations and the per-LP overrides in Landing Pages. EU/UK visitors who haven't opted in are invisible to those pixels until they do; GPC visitors are invisible silently. This is why your ad reporting will be slightly lower than your raw traffic in those regions, and that's the correct behavior under GDPR + CCPA + similar US state laws.
Where the cookie lives
A single small cookie called bckstg_consent records your choice and expires after one year. We don't use any third-party consent management vendor, the whole flow is first-party and lives in this codebase.