1. What cookies are
Cookies and similar technologies are small files or identifiers that a website or service may store on or read from your device. They may be needed for security and sessions or used for analytics and other purposes.
2. Categories
Strictly necessary
Used for security, protected gallery sessions, abuse prevention and remembering cookie choices. No separate consent is needed when they are genuinely necessary.
Analytics
Used to measure visits and website use. Where consent is required by law, they are not loaded before consent.
3. Technologies used on the website
Protected gallery session — Photo Event — confirms verified access to a specific gallery — session-based or short-lived — strictly necessary.
Cookie preferences — Photo Event — remembers acceptance, refusal or settings in local storage for 180 days.
Cloudflare — security and controlled access. On pages behind Access, CF_Authorization confirms login for the configured session duration; CF_AppSession protects against forged requests, with a standard lifetime of 24 hours. Where the relevant protection is used, __cf_bm expires after 30 minutes of continuous inactivity; cf_clearance confirms a passed challenge for its configured duration. These are security technologies, not analytics; not every listed cookie is set for every visitor.
Google reCAPTCHA — protection against automated abuse, separate from Google Analytics. It loads with the inquiry form on the home page, independently of analytics preferences. Google documents that execution sets _GRECAPTCHA for risk analysis. The website uses www.google.com, where other Google cookies from an existing session may also be present. The lifetime of _GRECAPTCHA is determined by the provider and browser restrictions. It is also used when you explicitly request to reveal the contact email on legal pages.
Google Analytics 4 — optional statistics about visits, viewed sections and actions. We use Basic Consent Mode v2: the Google tag loads only after analytics consent; advertising storage, advertising user data and personalisation are denied, and Google Signals is disabled in the website code. Our own analytics events do not include inquiry names, email addresses, phone numbers or text; the page URL is sent without query parameters or a fragment. The standard first-party GA4 cookies are _ga (distinguishing visitors) and _ga_<container-id> (session state), with a default lifetime of 2 years. Google Analytics settings and browser restrictions may change this lifetime; this is provider documentation, not a measured lifetime in your browser. Your analytics choice is honoured for 180 days. You can change it through Cookie preferences; on refusal, the website stops its own analytics events, sends a denied consent update to the Google tag and deletes accessible _ga and _ga_* cookies for the domain. Refusal does not retrospectively erase data already sent.
Language preference — Photo Event — remembers the preferred language in local storage without a set expiry; it can be removed in browser settings.
The current configuration does not use advertising cookies.
4. Managing consent
In the cookie panel, choose “Accept”, “Necessary only” or “Settings”. Analytics is optional.
You can change or withdraw your choice using “Cookie preferences” on this page.
5. Browser settings
Most browsers allow you to delete or block cookies. Blocking strictly necessary cookies may prevent protected features such as client galleries from working correctly.
6. Contact
Cookie and privacy questions: .