Cookie Policy
Last updated: 2026-10-08
1. What Are Cookies?
Cookies are small text files that your browser stores on your device when you visit our website.
2. Cookies We Use
Essential cookies (no consent required)
These cookies are necessary for the proper functioning of the website.
XSRF-TOKEN — CSRF attack protection (session)
welepix_session — session identifier (2 hours)
api_token — authentication token (up to 10 hours, up to 30 days in the Welepix app)
share_password_* — share page password verification AND group-selection participant (invited friend) session identification. HttpOnly, HMAC-SHA256 signed. (30 days)
cookie_consent — stores your cookie preference (1 year)
gu_device_id — guest gallery device identifier, so the photographer's per-device upload limit can be applied (1 year). Used only on the guest photo upload page.
welepix_app_mode — the mode chosen in the Welepix app (photographer or client), so the app opens the right screen (5 years).
__cf_bm, cf_clearance — Cloudflare protection against bots and attacks (up to 30 min / up to 1 year). Set by our infrastructure provider Cloudflare.
Functional cookies (used with consent)
These cookies allow us to save your preferences.
welepix_locale — language preference. Without consent it lasts only until the browser is closed; with functional cookies, 1 year.
These cookies are only used with your consent.
Analytics cookies (used with consent)
These cookies help us understand how the website is used and improve the service.
qr_attr — QR code source you arrived from (e.g., a studio QR on a business card). Used for internal conversion analytics — we measure which QR codes lead to registrations. First-party cookie, not shared with third parties (30 days, HttpOnly).
_ga — Google Analytics identifier (2 years)
_ga_* — Google Analytics session data (2 years)
Marketing cookies (used with consent)
These cookies are used to measure advertising performance.
_fbp — Facebook Pixel identifier (3 months)
_fbc — Facebook click identifier (3 months)
3. Local Storage
The platform uses browser localStorage for storing certain preferences.
These are not cookies — data is stored on your device and used only for platform functionality.
Used for:
— markers for tips, notes and news you have seen, recently opened galleries, export preferences
— in guest galleries: device identifier and the name you entered (gu_device_id, gu_guest_name_*)
— whether you already left or dismissed a review (testimonial_*)
— whether the app is installed (pwa_installed)
— welepix_visitor_id: a random visitor identifier for gallery viewing statistics (so the photographer can see returning visitors). Stored only if you accept analytics cookies and removed when consent is withdrawn.
4. Third-Party Cookies
Welepix uses the following third-party tools. Google Analytics and Meta are enabled only with your consent and are switched off by default.
Google Analytics (Google Ireland Limited) — website traffic and usage analytics. Google Consent Mode is used: analytics storage is denied by default and enabled only once you accept analytics cookies. IP anonymisation is enabled.
Meta (Facebook) Pixel and Conversions API (Meta Platforms Ireland Limited) — used to measure advertising performance. Consent is revoked by default and granted only once you accept marketing cookies. Only with this consent, registration and purchase events may also be sent to Meta from our server, together with hashed (SHA-256) email, name and phone data.
Cloudflare (Cloudflare, Inc.) — website protection and bot filter (Turnstile) on the registration, login and other forms. These cookies are necessary for security and do not require consent.
These providers may process data outside the European Economic Area on the basis of the Standard Contractual Clauses approved by the European Commission.
You can change or withdraw your consent at any time in the cookie settings at the bottom of the site.
5. Managing Cookies
You can at any time:
— change cookie settings in your browser
— delete cookies
— withdraw consent for non-essential cookies
Browser settings:
Chrome: Settings → Privacy and Security → Cookies
Firefox: Settings → Privacy & Security → Cookies
Safari: Settings → Privacy → Cookies
Edge: Settings → Cookies and Site Permissions
Note: disabling essential cookies may cause the website to malfunction.
6. Legal Basis
Essential cookies are used to ensure proper website functioning and do not require user consent.
Functional cookies are only used with User consent.
Analytics and marketing cookies are only used with the User's consent (GDPR Art. 6(1)(a)). Consent can be withdrawn at any time.
7. Contact
For questions about cookies, contact: [email protected]