Lyra+ Cookie Policy
Effective date: September 27, 2026
This policy explains the cookies and similar technologies used on www.lyraplus.com. It supplements the Lyra+ Privacy Policy, which covers the Lyra+ app and how we handle personal information generally.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies include local storage and scripts loaded from other services. We use "cookies" here to cover all of them.
The short version
- Necessary cookies keep the site secure and keep you signed in.
- With your choice, we use local storage for limited PostHog page analytics.
- Sentry reports errors without website session replay or screenshots.
- We don't sell your personal information or share it for cross-context behavioral advertising.
We ask before starting optional analytics. Declining does not affect sign-in, tickets, or other core features. Signed-in analytics also respects the account analytics preference used by the iOS app.
Cookies we use
| Cookie | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
lyra.web.analytics.choice.v1 | Lyra+ | Remembers whether you allowed optional website analytics on this browser. | Until you change your choice or clear browser storage | Preference |
PostHog identity storage (only while analytics is allowed) | PostHog | Keeps an anonymous browser ID for coarse page analytics. Signed-in events use a pseudonymous account ID. | Until you choose Necessary only or clear browser storage | Optional analytics |
__ph_opt_in_out_<project> | PostHog | After analytics has been allowed once, remembers the PostHog allow or opt-out choice in local storage. It is not an analytics identity. | Until you change your choice or clear browser storage | Preference |
sb-<project>-auth-token (may be split into .0, .1) | Lyra+ (via Supabase) | Keeps you signed in after you log in. Not set until you sign in. | Up to 400 days, or until you sign out | Strictly necessary |
sb-<project>-auth-token-code-verifier | Lyra+ (via Supabase) | Completes email-link and Google sign-in securely. | Until sign-in finishes | Strictly necessary |
__cf_bm, cf_clearance | Cloudflare | Protects the site from bots and abuse. Set only when Cloudflare's protection is triggered. | 30 minutes to 1 year | Strictly necessary |
Services we rely on
Some features load content from other companies. They receive technical information such as your IP address and browser type when they do, and they handle it under their own privacy policies.
- PostHog: Receives coarse page analytics only after you allow analytics here and your account preference permits it. Session replay is off.
- Sentry: Receives website error diagnostics. Session replay, screenshots, and performance tracing are off.
- Apple (Sign in with Apple): Loaded only when you choose Continue with Apple.
- Apple MapKit: Shows the venue map on event pages.
- Google: Used only when you choose Continue with Google; sign-in happens on Google's site.
- Stripe: Checkout happens on Stripe's site, which sets its own cookies to process payment and prevent fraud.
- Cloudflare: Delivers and secures the site.
Cookie settings
Choose whether to allow optional analytics in this browser. PostHog tracks broad page categories only; it does not record clicks, form contents, full URLs, or sessions. We don't use advertising pixels. Sentry records error diagnostics without browser storage for analytics.
You can still control cookies yourself:
- Signing out removes the sign-in cookies from this browser and resets the analytics identity.
- Your browser settings let you block or delete cookies and local storage. Blocking necessary sign-in cookies prevents sign-in and ticket purchases; optional analytics is never required.
- A Global Privacy Control signal keeps optional analytics off. We don't respond to legacy "Do Not Track" signals.
Changes and contact
We'll update this policy and its effective date when the cookies we use change. Questions? Email support@lyraplus.com.