Cookie Policy

Every cookie we use, why, and how to change your choice.

Effective October 1, 2026Version 1.0Translation — the Spanish version prevails

This Cookie Policy explains which cookies and similar technologies (browser local storage, measurement scripts) Passly uses, for what purpose, how long they last and how to decide. The list below comes directly from the code: if we add a cookie, this page changes with it.

Passly does not use advertising or cross-site tracking cookies. We only use what is necessary to operate and, if you give us permission, an optional convenience feature and aggregate analytics that are never activated on invitations.

1. What they are

Cookies are small files that a site stores in your browser. Local storage (localStorage and sessionStorage) works in a similar way. Some are essential for the site to work; others are optional and, in that case, require your permission before they are activated.

2. Categories we use

CategoryPurposeDoes it need your permission?
NecessarySigning in, maintaining security, remembering your workspace, RSVPing without submitting twice, the event gallery and app, and saving your cookie choice.No. Without them the service does not work.
FunctionalRemembering your account on this device to show you “Continue as…” (“Continuar como…”).Yes.
AnalyticsMeasuring in aggregate which Passly pages are visited and how quickly they load. It is never activated on invitations or in the gallery.Yes.
Marketing / advertisingWe do not use any.—

3. Full list

NameTypeCategoryPurposeDuration
sb-*-auth-tokenCookieNecessaryKeeps you securely signed in. It may be split into several parts (.0, .1…). (Supabase (en nombre de Passly))Until you sign out (renewed while in use)
passly_active_workspaceCookieNecessaryRemembers which workspace you are in so we can show your events. (Passly)1 year
sidebar_stateCookieNecessaryRemembers whether you left the dashboard sidebar open or closed (a customization you choose). (Passly)7 days
gallery_gidCookieNecessaryRandom guest identifier in the event gallery, so you can see and delete your own photos. (Passly)90 days
gallery_gnameCookieNecessaryThe name you typed when joining the gallery, used to sign your photos and comments. (Passly)90 days
passly_consentCookieNecessaryStores your cookie choice so we don't ask again. (Passly)180 days
passly:deviceLocal storageNecessaryRandom device identifier in the event app (votes, games, DJ requests) so each person counts once. (Passly)Until you clear it or sign out
passly:live:nameLocal storageNecessaryThe name you typed in the event app, so we don't ask again. (Passly)Until you clear it or sign out
staff_token_*Session storageNecessaryTemporary door-staff access after entering the PIN (expires after 12 hours). (Passly)Browser session
passly:staff-queue:*Local storageNecessaryQueue of check-ins made offline, sent once the connection returns. (Passly)Until they are sent
passly:idem:*Session storageNecessaryPrevents an RSVP from being sent twice if you tap the button repeatedly. (Passly)Browser session
pi-viewed:*Session storageNecessaryAvoids counting the same invitation opening twice in one visit. (Passly)Browser session
passly:* (preferencias de interfaz)passly.animPreview · passly-custom-audio-muted · passly_brand_vars:* · editor_* · seating-planner-* · timeline-checklist-* · hasSeenOnboardingLocal storageNecessaryPreferences you choose inside the app: guest view, sound, editor panel sizes, unsaved drafts, template favorites, seating plan on this device. Not used to track you. (Passly)Until you clear it or sign out
passly_remembered_accountLocal storageFunctionalRemembers your name, email and photo on this device to show “Continue as…”. Only stored if you allow it. (Passly)Until you clear it or sign out
Vercel Web AnalyticsMeasurement scriptAnalyticsMeasures aggregate visits to Passly pages (not invitations). It uses no cookies: a visit is identified by a hash that changes every 24 hours. We send the path without parameters or tokens. (Vercel)Nothing stored on your device
Web Vitals (Passly)Measurement scriptAnalyticsMeasures page load speed (20% sample) and sends it to our server without personal identifiers. (Passly)Nothing stored on your device

4. On invitations, the gallery and the event app

The pages that guests open (invitations, gallery, event app, staff portal) do not load analytics or optional cookies, which is why they do not show the cookie banner. They only use what is necessary to RSVP and take part.

The fonts on invitations are served from our own domain. The venue map and YouTube music only connect to Google when you tap to view or play them:

ServiceWhereWhen it connects
Google Maps (Google LLC)Event location mapOnly loads when you tap “Show map”; until then, Google receives nothing.
YouTube (Google LLC)Background music on some invitationsOnly loads, in privacy-enhanced mode (youtube-nocookie.com), when you press play.

5. How to decide and change your mind

The first time you visit Passly we ask you with three options of the same size: Accept all (“Aceptar todo”), Reject non-essential (“Rechazar no esenciales”) or Customize (“Personalizar”). Until you decide, only the necessary cookies work.

You can change your choice at any time from “Cookie settings” (“Configuración de cookies”), at the bottom of every page, in Settings → Privacy and data (Ajustes → Privacidad y datos), or here:

We store your choice for 180 days; after that we will ask you again. If your browser sends the Global Privacy Control (GPC) signal, we treat it as a refusal of analytics.

You can also delete or block cookies from your browser settings; if you block the necessary ones, you will not be able to sign in.

6. Changes

If we add a cookie in a category that requires permission, we will ask you again. Changes are recorded in this page's history. More information about how your data is processed in the Privacy Notice.

Version history

  • v1.0 · October 1, 2026 · Material change — First published version.