Cookie
policy.

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your preferences, recognise your device, and provide a more personalised experience. Vowly Event also uses similar technologies such as local storage, session storage, and pixel tags, which are collectively referred to as "cookies" in this policy.

We classify our cookies into four categories based on their purpose. Strictly necessary cookies are always active because they are essential for the Service to function. The other categories require your explicit consent under UK PECR and the EU ePrivacy Directive.

• Strictly necessary — authentication, security, fraud prevention, and load balancing
• Functional — language preference, theme, recently viewed events, and cart state
• Analytics — anonymised usage statistics to help us improve the platform (consent required)
• Marketing — third-party advertising and re-targeting pixels (consent required, currently disabled)

Below is a non-exhaustive list of the primary cookies set by Vowly Event. The duration indicates how long the cookie persists on your device after it is set.

• session_id (strictly necessary, session) — maintains your authenticated session
• csrf_token (strictly necessary, session) — protects against cross-site request forgery attacks
• locale (functional, 1 year) — remembers your language preference
• theme (functional, 1 year) — remembers light/dark theme preference
• consent (strictly necessary, 1 year) — stores your cookie consent choices
• _ga, _ga_* (analytics, 13 months) — Google Analytics 4 in anonymised mode (only set with consent)
• stripe_mid (strictly necessary, 1 year) — set by Stripe to prevent fraudulent payments

Some pages may load resources from trusted third parties that set their own cookies. We carefully select these providers and have data processing agreements in place. Third-party cookies are subject to the privacy policies of the respective providers.

• Stripe — payment processing and fraud detection (stripe.com/privacy)
• Google Analytics 4 — anonymised analytics, IP truncation enabled (policies.google.com/privacy)
• Cloudflare — DDoS protection and content delivery (cloudflare.com/privacy)
• YouTube (embedded videos only) — privacy-enhanced mode (youtube.com/howyoutubeworks/policies)

You have full control over non-essential cookies. We display a consent banner on your first visit where you can accept, reject, or customise your cookie preferences. You can change your choices at any time via the "Cookie Preferences" link in the footer.

• Browser controls — most browsers allow you to block or delete cookies via settings
• Cookie preferences — accessible from the footer of every page
• Do Not Track — we honour DNT signals where technically feasible
• Opt-out from Google Analytics — install the Google Analytics Opt-out Browser Add-on

Rejecting strictly necessary cookies will prevent the platform from functioning correctly — you will be unable to log in or complete bookings. Rejecting functional, analytics, or marketing cookies has no impact on your core ability to use the Service, but may result in a less personalised experience.

We may update this Cookie Policy to reflect changes in technology, regulation, or our service. The "Effective" date at the top of this page indicates the most recent revision. Material changes will be highlighted in our consent banner upon your next visit.