Legal

Cookie Policy

Last updated September 14, 2026

In short

Three sign-in cookies, a theme preference, and optional analytics cookies that stay off until you accept. Guest-facing event pages never load Google or Meta tags.

1. Our approach

CrowdSnaps uses strictly necessary cookies so the product works, plus optional analytics cookies on the marketing site and account pages when you accept them. Google Tag Manager is present on those pages so the container can be verified, with storage denied until you accept. Guest upload pages, galleries, slideshows, and download pages never load analytics or advertising tags.

Strictly necessary cookies do not require a prompt. Optional analytics cookies are off until you accept the banner, and you can change that choice any time from Cookie settings in the footer.

2. What cookies are

Cookies are small text files a website asks your browser to store. Local storage is a similar mechanism that keeps a value on your device without sending it to the server on every request. Both are described together on this page.

3. Cookies we use

Strictly necessary

Name	Purpose	Expires
`authjs.session-token`	Keeps you signed in to your dashboard. Set only after you log in.	30 days, or when you sign out
`authjs.csrf-token`	Protects sign-in and sign-out forms against cross-site request forgery.	Session
`authjs.callback-url`	Remembers where to send you after a successful sign-in.	Session

Cookie names may carry a __Secure- or __Host- prefix in production, which instructs the browser to only send them over HTTPS.

Local storage

Key	Purpose	Expires
`crowdsnaps-theme`	Remembers whether you chose the light or dark theme, so the page doesn’t flash the wrong one on load.	Until you clear site data
`crowdsnaps-analytics-consent`	Remembers whether you accepted or rejected optional analytics cookies, so we don’t ask on every visit.	Until you clear site data

Analytics and advertising (optional)

These are set only after you accept, and only on the marketing site, signup, and account pages. Guest event pages never load them. If those tools are not enabled for the site, none of these cookies are set.

Name	Purpose	Expires
`_ga`, `_ga_*`	Google Analytics 4 — distinguishes visitors and sessions on this site.	Up to 13 months
`_gcl_au`	Google Tag Manager / Ads conversion click measurement, when that tag is configured.	90 days
`_fbp`, `_fbc`	Meta Pixel — measures visits and conversions from ads, and may be used by Meta for ads on its products.	Up to 90 days

4. Guests and event pages

Guest upload pages, galleries, slideshows, host portals, and download pages do not require sign-in and do not load analytics or advertising tags. A guest can scan a QR code, upload photos, and leave without those third parties being contacted.

5. Third-party cookies

When you accept optional analytics cookies, your browser also contacts Google and/or Meta to load their tags. Those companies set the cookies listed above and process the data under their own policies: Google, Meta.

When you open the Stripe checkout or billing portal, you are on a page hosted by Stripe, which sets its own cookies for fraud prevention and payment security. These are governed by Stripe’s privacy policy.

Fonts are served from Google Fonts at build time and bundled with the application, so your browser does not contact Google when you visit our pages.

6. Controlling cookies

You can accept or reject optional analytics cookies from the banner, or reopen it with Cookie settings in the footer. Rejecting them does not affect guest event pages or signing in.

You can also delete or block cookies through your browser settings. Blocking the strictly necessary cookies listed above will prevent you from signing in to your dashboard, but guest-facing event pages will continue to work normally.

Clearing local storage will reset your theme preference to follow your operating system setting.

7. Changes and contact

If we add a cookie, this page is updated before the change ships. See our Privacy Policy for how we handle personal information more broadly.

Questions: privacy@crowdsnaps.com