Cookie Policy
Last updated: October 2026 · Cloud Ninja Consulting ApS · VAT DK46044118
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They are used to remember information about your visit and improve your experience.
2. Which cookies do we use?
Eventphoto.io uses strictly necessary cookies and, when analytics is on (section 5), analytics cookies from Google Analytics 4 and advertising cookies from Microsoft Advertising, whose tag (UET) measures our ads on Bing and Microsoft's network. We use no other advertising cookies or marketing pixels.
| Name | Purpose | Expiry | Type |
|---|---|---|---|
| sb-*-auth-token | Keeps dashboard and admin users signed in via Supabase authentication | Up to 400 days, refreshed while you are signed in; removed when you sign out | Necessary |
| event_unlocked_* | Lets a guest stay unlocked on a PIN-protected event after entering the correct PIN code | 7 days for guests; for the host up to 30 days, renewed while used, never beyond 7 days after the event ends | Necessary |
| event_download_* | Lets a verified host download event files after entering a valid download code | 30 minutes | Necessary |
| event_admin_* | Lets a verified host perform protected event-management actions | Up to 30 days, renewed while you use it, never beyond 7 days after the event ends | Necessary |
| __Host-event_client_* | Lets the client a planner handed an event to manage that event on this device | Up to 30 days, renewed while you use it, never beyond 7 days after the event ends | Necessary |
| __Host-link_pending | Holds the host link you opened until you press "Open my host page" | 15 minutes | Necessary |
| __Secure-host_claim_* | Lets the browser that paid for a new event manage it when it returns from the payment page; holds a random value, deleted after use | 24 hours | Necessary |
| __Host-biz_claim | Ties a business sign-up to the browser that started it, so only that browser is signed in to the new workspace. Signed, holds no email address | 24 hours | Necessary |
| __Host-biz_confirm | Holds the "Confirm your email" link for a moment so the confirm page can act on your button press | 15 minutes | Necessary |
| site_locale | Remembers which language you chose so the app pages open in that language | 1 year | Necessary |
| _ga / _ga_* | Measures page views and general site usage through Google Analytics 4, but only after you consent. Google Analytics 4 does not log or store IP addresses | Up to 2 years | Analytics (optional) |
| _uetsid | Microsoft Advertising (UET): recognises one visit across the pages you open, to measure our ads. Only when analytics is on | 1 day | Advertising (optional) |
| _uetvid | Microsoft Advertising (UET): a random ID for your browser that links your visits, so Microsoft can match a purchase to an earlier ad click. Only when analytics is on | 390 days | Advertising (optional) |
| _uetmsclkid | Microsoft Advertising (UET): keeps the click ID Microsoft adds to the link when you come from one of our ads. Only when analytics is on | 90 days | Advertising (optional) |
| MUID / MR / MSPTC | Microsoft's own cookies on its domain, set or read when the tag reports to Microsoft, which happens only when analytics is on: MUID identifies your browser to Microsoft, MSPTC is a visitor ID for browsers that partition cookies, and MR is a technical flag | MUID 13 months; MR and MSPTC as Microsoft sets them | Advertising (optional) |
Besides cookies, the app also uses browser storage (localStorage) to remember the anonymous guest session id, guest name, certain in-progress client flows, and your cookie choice (the entry guestcam_cookie_consent_v1, kept until you clear it or change your choice). That storage is not a cookie, but it is still necessary for the service to work smoothly.
One browser-storage entry is optional: if analytics is on and you arrived from one of our ads in ChatGPT, gc_ad_click_v1 keeps the campaign names in the ad link and the click reference OpenAI added to it for 30 days, so we can tell whether the ad led to a free event or a purchase. It follows your analytics choice (section 5): switching analytics off under Cookie settings deletes it.
The Microsoft Advertising tag also keeps copies of its cookies in browser storage (entries whose names start with _uet). Like the cookies, they exist only while analytics is on, and switching analytics off under Cookie settings deletes them on this site. MUID, MR and MSPTC sit on Microsoft's domain, so you delete those in your browser settings. Microsoft explains how it uses this data in the Microsoft Privacy Statement.
We also run Vercel Speed Insights to measure how fast pages load. It sends page-load timings and the page URL to our hosting provider, sets no cookies and stores nothing on your device. See the Privacy Policy for the legal basis.
3. Advertising cookies and ad measurement
We do not use Facebook Pixel or similar marketing tags. The one advertising tag on this site is Microsoft Advertising's UET tag (below). It loads only when analytics is on (section 5), like Google Analytics 4, which we use for traffic measurement and page-view reporting. Google Analytics 4 does not store IP addresses, and we do not use its data for advertising profiling. With the same choice, our server also records how you arrived (the referring website's domain, the campaign tags in the link, the type of ad click and the first page you opened) with an event you create or a purchase; this uses no cookie and stores nothing on your device. See the Privacy Policy, section 2.
When analytics is on, the Microsoft Advertising tag reports each page you open here to Microsoft (its address and title, the page you came from, browser details and your IP address, with the IDs in the cookies above), whether or not you came from an ad, so we can see which of our ads on Bing and Microsoft's network lead to visits and purchases. Microsoft uses this data as a controller in its own right, also for its own purposes, and keeps it for 390 days. See the Privacy Policy, section 5, and the Microsoft Privacy Statement.
If you also arrived from one of our ads in ChatGPT, our server tells OpenAI when that ad led to a free event, a checkout or a purchase: the click reference, our own ID for that step, the order value and currency, the address of the page (never an event or account page) and the time. OpenAI places no cookie or tag of its own on this site for this, and we do not send your name or email address. See the Privacy Policy, section 5.
4. Deleting cookies
You can delete cookies at any time in your browser settings. Note that deleting necessary cookies may log you out, relock protected events, or remove verified host access until you authenticate again.
Guide to deleting cookies: aboutcookies.org
5. Legal basis
The use of strictly necessary cookies is permitted under the Danish Cookie Order (cookiebekendtgørelsen) § 4(1)(2) and does not require consent. Analytics, which includes the Google Analytics 4 cookies, the Microsoft Advertising cookies and the ad-click entry, is not strictly necessary: it is optional and rests on consent. On our English pages, visitors in the Americas, going by the time zone set on their device, have it on by default with no banner; everyone else gets it only after pressing Accept in the cookie banner (GDPR Art. 6(1)(a)). Anyone can switch it off at any time under Cookie settings in the footer, which deletes the Google Analytics and Microsoft Advertising cookies and the ad-click entry on this site.
6. Contact
Questions about our use of cookies? Write to support@eventphoto.io
Cloud Ninja Consulting ApS, Apeldoorn Allé 20, 2791 Dragør, Denmark