Cookie Policy

We use a small number of cookies. Most of them are strictly necessary to log you in, keep your basket alive, and tell our servers apart from a robot. A couple are analytics cookies that help us see which features fans actually use. Marketing cookies are off by default; we set them only if you explicitly opt in.

Strictly necessary

Set by NoReplay on first request. These keep you signed in, hold an in-progress checkout, remember your theme, and protect against cross-site request forgery. Without these the site cannot function. No consent is required because they are exempted under both the Kenya DPA implementing rules and the EU ePrivacy Directive.

Performance & analytics

Help us understand which pages and features people use. We collect the data in aggregate; cookies set by these tools are configured to anonymise IP addresses and respect Do Not Track. You can opt out at any time from the consent banner or in account settings.

Functional

Used by embedded components (Spotify previews, YouTube videos, map tiles) to remember playback or pan position. We load these only when you interact with the relevant component.

Marketing

Off by default. We do not currently use third-party advertising networks. If we start, you will see them listed here and they will require explicit consent.

A current, exhaustive list (with name, purpose, expiry) is available in the consent banner under "Show details". We update the list every time we add or remove a cookie. A standalone settings page is on the roadmap; in the meantime, email dpo@noreplay.vip for a versioned snapshot.

• In NoReplay: the consent banner reappears on demand — click "Reset cookie preferences" in the footer (or clear site data in your browser). You can decline or revoke analytics and marketing cookies at any time without affecting your account.
• In your browser: Chrome, Safari, Firefox and Edge each have a cookie controls page. Blocking strictly necessary cookies will prevent NoReplay from loading.
• Do Not Track: we honour browser DNT signals for analytics-tier cookies.
• By email: for a full audit trail of your consent history or to revoke consent in writing, contact dpo@noreplay.vip.

We use localStorage for non-tracking conveniences (e.g. theme preference, draft search filters) and the SubtleCrypto Web API for client-side ticket signing checks. We do not use device fingerprinting beyond the fraud-detection signals declared in the Privacy Policy.

If we change which cookies are set or how they are categorised, we update this page and refresh the consent banner so you can re-opt-in or opt-out.