Legal
Cookie Policy
Last updated: 30 September 2026 · Version 2026-09-30
This policy lists every cookie and browser storage item GetMusicAt uses, what it is for and how long it lasts.
Summary
#GetMusicAt only uses cookies and browser storage that are strictly necessary for the service you ask for: keeping you signed in, protecting forms against forgery, running the demo, and remembering a few choices you make in the app. We do not use analytics, advertising, social media or other tracking cookies, and we do not let third parties set cookies on our pages.
Under the Swedish Electronic Communications Act (2022:482), which implements the EU ePrivacy rules, strictly necessary storage does not need consent. That is why we do not show a cookie banner. If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this policy.
The public website getmusic.at sets no cookies. Our usage statistics are recorded on our servers when you take certain actions in the app, without cookies or tracking scripts (see our Privacy Policy).
Cookies in the app (app.getmusic.at)
#These first-party cookies are set by app.getmusic.at only. They are sent only over encrypted connections, are bound to that exact host, and all except the form-protection cookie are inaccessible to scripts (HttpOnly). The names start with __Host-.
| Name | Purpose | Duration |
|---|---|---|
__Host-gma_at | Keeps you signed in: a short-lived access token for your session. | 15 minutes |
__Host-gma_rt | Keeps you signed in: renews the access token so you do not have to sign in again. | 30 days, renewed while you use the app; a sign-in lasts at most 90 days |
__Host-gma_csrf | Security: protects forms and actions against cross-site request forgery. Readable by the app’s own scripts by design. | 24 hours |
__Host-gma_demo | Runs the public demo: identifies your anonymous demo session so its time limit is enforced and the demo is offered once per browser. Only set if you start the demo. | 30 days |
The admin tool used by our staff (admin.getmusic.at) sets corresponding cookies (__Host-gma_admin_at, __Host-gma_admin_rt, __Host-gma_admin_csrf) for staff sign-in only.
Browser storage in the app
#The app also stores a few values in your browser’s local storage and session storage. They stay on your device, and only the device identifier is sent to us.
| Key | Purpose | Duration |
|---|---|---|
gma.device | A random identifier for this browser, so the app can tell your devices apart when enforcing one playing device per location and when troubleshooting playback. | Until you clear your browser data |
gma.browse.layout | Remembers whether you view sounds as a grid or a list. | Until you clear your browser data |
gma.invite | Keeps an invitation link in this tab while you sign in or create an account, then is removed. | Until you join or close the tab |
gma:wizard-return | Returns you to the setup wizard after adding a card on Stripe’s payment page. | Until you return or close the tab |
Third-party pages
#When you add a card or open Manage billing, you leave GetMusicAt for a payment page hosted by Stripe. Stripe sets its own cookies there, for example to prevent fraud, under Stripe’s cookie policy. If you connect Sonos, you sign in on Sonos’ own page, which is covered by Sonos’ policies.
How to control cookies
#You can see and delete cookies and site data in your browser’s settings, and block cookies for our sites. If you block or delete the necessary cookies, you will be signed out and will not be able to sign in or use the app until they are allowed again. Signing out removes the sign-in cookies.
Your browser’s help pages explain how to do this, for example for Chrome, Safari, Firefox and Edge.
Contact
#Questions about cookies:
Royal Streaming AB (org. no. 556697-4746)Vaksalagatan 16, Våning 3, 753 20 Uppsala, Sweden
Email: support@getmusic.at