Cookie Policy
Version 1.2 — Effective date: 18 August 2026 (rev. 1.1: cs-locale added; rev. 1.2: cs-locale-choice added)
This Cookies and Similar Technologies Policy (“Cookies Policy”) explains which technologies we use when you visit the Website or use the Application and the Services, the purposes for which we use them, which of them are strictly necessary, when we request your consent, and how you can manage your choices. This Policy should be read together with the Privacy Policy and the Terms of Use. Capitalised terms that are not defined in this Policy have the meanings given to them in the Terms of Use.
1. What are cookies and similar technologies?
Cookies are small data files that are stored on or retrieved from your browser or device when you visit a website or use an online service. Among other things, they may be used to maintain a session, recognise a device or browser, store choices, and enable the secure operation of a service.
Some cookies are deleted when you close your browser or end your session, while others remain on your device for a specified period or until you delete them.
Similar technologies, such as local storage, device identifiers, pixels and software development kits (SDKs), may be used for corresponding purposes on the Website or in the Application. For simplicity, this Policy uses the term “cookies” to refer also to similar technologies, unless the context indicates otherwise.
2. The purposes for which we use cookies
2.1 Strictly necessary cookies
Strictly necessary cookies are used only to the extent required for the operation and security of the Platform or to provide a feature you have requested. Among other things, they may be used to maintain your session, provide secure access to your Account, protect against unauthorised use and malicious activity, manage the payment flow, and store your choices concerning optional cookies.
We do not request your consent to use strictly necessary cookies. If you block them through your browser or device, certain core features of the Platform may not function properly.
2.2 Functional cookies
Functional cookies are used to store optional choices and preferences, such as language or the way certain features are displayed, so that your experience is more consistent and tailored to your choices. Where a functional cookie is not strictly necessary to provide a feature you have requested, it is enabled only if you have given your consent.
2.3 Usage analytics cookies
Usage analytics cookies help us understand how the Platform is used, which features are used most frequently, whether technical problems occur, and how we can improve performance, reliability and the User experience.
For this purpose, we use PostHog, as described in the Privacy Policy. Optional analytics technologies are enabled in accordance with your consent choices and, where required, only after you have given your prior consent.
We do not use analytics data for advertising targeting or commercial profiling. The use of analytics technologies is limited to analysing the operation and use of the Platform and is not intended to analyse or commercially exploit the photographs, videos or other Content of Events.
2.4 Marketing cookies
We use the Meta Pixel to measure the effectiveness of our advertisements, attribute selected conversion events to advertising campaigns, produce aggregated reports and optimise our marketing activities. Where the relevant features are enabled, it may also be used to create advertising audiences or for retargeting.
The Meta Pixel is enabled only if you have consented to the “Marketing” category. It remains disabled if you refuse or withdraw your consent.
Its use is limited to public marketing pages of the Website and specifically designated conversion-confirmation pages. It is not enabled on private Event pages, Event Albums, invitations, or screens used to upload, view or download Content, and it is not used to collect or transmit Event Content or Guest data.
The relevant technologies, purposes, durations and categories are set out in the detailed register in Section 5.
3. How we obtain and manage your consent
On your first visit to the Website or, where applicable, when you first use the Application, and subsequently whenever required, a cookie management tool is displayed through which you may:
- (a) accept all optional cookies;
- (b) reject all optional cookies; or
- (c) select separately the categories you wish to enable.
Optional cookies remain disabled until you make an affirmative choice. Merely continuing to browse or use the Platform does not constitute consent.
Rejecting optional cookies does not prevent you from using the core features of the Platform. It may, however, affect features that depend on particular optional choices.
We store your choice so that you do not need to repeat it on every visit and so that we can demonstrate that we respected your preferences. We may ask you to make a new choice, in particular where the technologies or their purposes change materially, where the retention period for your choice expires, or where you delete cookies or use a different device or browser.
You may change your choices or withdraw your consent at any time through the “Cookie Settings” option available through the Platform. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before it.
4. Cookies and technologies provided by third parties
Some cookies or similar technologies are provided by third-party partners that support the operation, security, payments or usage analytics of the Platform. Third-party providers may receive technical or usage data to the extent necessary to provide the corresponding services.
We use PostHog for usage analytics, in accordance with your consent choices and as described in the Privacy Policy. The precise name, type and duration of the technologies used are set out in the detailed register in Section 5.
We use the Meta Pixel provided by Meta Platforms Ireland Limited to measure the effectiveness of advertisements and selected conversion events. If you have consented to the “Marketing” category, Meta may receive technical and interaction data such as your IP address, basic device and browser information, the page URL, cookie or advertising-click identifiers, and information indicating that a selected action has occurred. We do not transmit through the Meta Pixel Event Content, Guest data, Account data, payment information or itemised transaction details. Further information is provided in Section 10.9 of the Privacy Policy.
Payments are processed through Stripe. Depending on the technical integration, Stripe may use cookies or similar technologies to process the transaction, secure payments and prevent fraud. The relevant technologies are listed in Section 5 in accordance with the actual technical implementation.
We may use a dedicated cookie management tool to store and manage consent choices. The provider and the relevant technologies are identified in the detailed register in Section 5.
Further information about our providers, the categories of personal data they may process, and any transfers of data outside the European Economic Area is provided in the Privacy Policy.
5. Detailed register of cookies and similar technologies
The following register includes the technologies in use on the effective date of this Policy. The register is updated when technologies or providers are added, removed or changed. If a change involves a new optional purpose or requires fresh consent, we will request your consent before enabling the relevant technology.
| Name | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
| cs_refresh | Cloudsnap (API) | Maintains login (refresh token); HttpOnly, Secure, SameSite=Lax, Path=/api/auth | 30 days | Strictly necessary |
| cs_oauth_state | Cloudsnap (API) | Google login security (CSRF/PKCE state) | 10 minutes | Strictly necessary |
| cs_ms_oauth_state | Cloudsnap (API) | Microsoft login security (when enabled) | 10 minutes | Strictly necessary |
| cloudsnap.theme | Cloudsnap (web) | Light/dark theme preference | 1 year | Functional (set only by user action) |
| cs-locale | Cloudsnap (web) | App display-language preference; SameSite=Lax, Path=/ | 1 year | Functional (set only by user action) |
| cs-locale-choice | Cloudsnap (web) | The language you picked from the menu on an event page, on this device; SameSite=Lax, Path=/ | 1 year | Functional (set only by user action) |
| cookieyes-consent | CookieYes | Stores consent choices | As specified by CookieYes | Strictly necessary |
| _ga, _ga_* | Google Analytics 4 | Usage statistics (anonymous identifiers; tokens are removed from URLs) | Up to 2 years | Analytics – only after consent |
| PostHog (ph_*) | PostHog EU | Product analytics (EU cloud, without session recording, with text masking) | As specified by the SDK | Analytics – only after consent |
| _fbp | Meta | Browser recognition and advertising-conversion measurement (when enabled) | up to 3 months | Marketing – after consent |
| _fbc | Meta | Stores the ad-click identifier when the visit comes from a Meta advertisement (when enabled) | up to 3 months | Marketing – after consent |
| Meta Pixel (Facebook) & Conversion Tracking | Meta | Sends technical data and selected events for advertising and conversion measurement (when enabled) | no storage | Marketing – after consent |
The duration stated in the above register refers to the period for which the relevant technology remains on your device or browser. Data generated or transmitted through that technology may be subject to different retention periods, as described in the Privacy Policy.
6. Your browser or device settings
In addition to the “Cookie Settings” tool, you may delete or block cookies through your browser or device settings. The options available vary depending on the browser, operating system and device you use.
Deleting or blocking cookies through your browser may also delete your stored consent choices, in which case you may be asked to set them again. Blocking strictly necessary cookies may affect access, security or the operation of certain Services.
7. Personal data and your rights
Some data collected through cookies or similar technologies may constitute personal data, particularly when linked to a device identifier, IP address, Account or another identifiable person. Information about the purposes and legal bases of processing, recipients, transfers, retention periods and your rights is provided in the Privacy Policy.
Withdrawing consent to optional cookies does not limit any other rights available to you under applicable data protection law.
8. Changes to this Policy
We may amend this Policy to reflect changes to the Services, the technologies we use, our providers or applicable law. The version in force will be published on the Platform with a clear indication of its effective date.
Where a change involves a new optional purpose or other processing for which consent is required, we will request your fresh consent before enabling the relevant technology.
9. Contact
If you have any questions about this Policy or would like information about the technologies we use, you may contact us at contact@cloudsnap.gr.
10. Language of the Policy
This Policy has been drafted in Greek and may also be made available in other languages for your convenience. We make every reasonable effort to ensure that each translation accurately and completely reflects the Greek text. In the event of any discrepancy or inconsistency, the Greek text shall prevail.