Cookie policy.

• Host session. Keeps you logged in to your dashboard. Set by our sign-in provider, Supabase. Lasts while you are logged in.
• Guest session. When you join a gathering, a signed cookie remembers that it is you, so you can come back to add photos without logging in again. Lasts 90 days. It holds a random guest ID, nothing about you.
• Bot protection. Cloudflare Turnstile sets a short-lived cookie on forms to tell people from bots, so we can leave off the puzzles.
• Payment. Stripe sets its own cookies on the checkout page for fraud prevention. Their policy is at stripe.com/cookies-policy.

All of these are strictly necessary for the service to work, which is why the law does not require your consent for them and we do not ask.

On the public site and the host dashboard we use Google Analytics, loaded through Google Tag Manager, to see how many people visit, where they came from and which pages help. It sets cookies (_ga and _ga_…, up to two years) that give your browser a random ID so repeat visits count once. Google's policy is at policies.google.com/technologies/cookies.

These only run if you choose Accept on the banner. Choose No thanks and no analytics cookies are set and nothing is measured; the site works exactly the same. Your answer is kept in your browser so we do not ask again. You can change your cookie choice at any time.

Pages for guests (joining a gathering, adding photos, viewing an Album) never load Google Analytics, so guests see no banner.

Your browser remembers a couple of small conveniences: that you have seen a host's welcome message, and that you have seen the "swipe up" hint in a slideshow, so we do not show them twice. These never leave your device.

You can delete cookies in your browser settings at any time. If you delete the guest cookie you can log back in with your email and a six-digit code. If you block cookies entirely, sign-in and joining will not work.

Questions: the contact form. Run by [Company legal name] Ltd.