Cookie Policy
Last updated: September 30, 2026
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, authenticate your identity, and understand how you use the service.
How We Use Cookies
gigiii uses strictly necessary cookies and similar device access for authentication, security and public-form anti-abuse. Optional analytics cookies load only after you opt in via the cookie consent banner. On public event pages, organizer advertising tags may use optional marketing cookies only when you accept both Analytics and Marketing. Support chat on signed-in pages uses a separate, optional Functionality choice.
Strictly Necessary Cookies
These cookies are required for the platform to function. They cannot be disabled as they enable core features like authentication and security.
- cc_cookie — Stores your cookie consent preferences
- authjs.session-token — Maintains your authenticated session
- authjs.csrf-token — Protects against cross-site request forgery attacks
- Spamblock anti-abuse script — Runs on public contact forms to help distinguish legitimate submissions from abuse. It may process device and interaction data needed for that purpose.
Analytics Cookies
If you accept analytics, we may set or allow the following via Google Tag Manager (GTM-NMNZ55XN), which can load Google Analytics 4 and Microsoft Clarity, and we may load Vercel Analytics / Speed Insights.
| Cookie / technology | Provider | Purpose | Typical lifetime |
|---|---|---|---|
| _ga | Google Analytics (via GTM) | Distinguishes users | Up to 2 years |
| _gid | Google Analytics (via GTM) | Distinguishes users | 24 hours |
| _gat / GA related | Google Analytics (via GTM) | Throttles request rate | Short-lived |
| GTM / gtag | Google Tag Manager | Delivers consented tags | Per Google policies |
| _clck, _clsk, Clarity cookies | Microsoft Clarity (via GTM) | Session replay, heatmaps, UX diagnostics | Per Microsoft Clarity policies |
| Vercel Analytics / Speed Insights | Vercel | First-party page performance and aggregated usage | Per Vercel Analytics policies |
Analytics tools may process device/browser data, approximate location, page paths, and (for Clarity) masked session recordings of page interactions. We do not use analytics cookies to show ads. You can withdraw consent anytime via Manage Cookie Preferences.
Premium programme hosts may optionally configure their own GA4 measurement ID (G-…) or Google Tag Manager container (GTM-…) in Account settings. When set, gigiii loads the host-owned tag on gigiii-hosted public event and confirmation pages only after the visitor accepts analytics cookies. The cross-origin calendar embed does not load this tag. Gigiii sends allowlisted event and conversion data without RSVP or ticket purchaser names or emails.
Marketing Cookies
When you accept both Analytics and Marketing, an event organizer's tag container may load advertising tags on gigiii-hosted public event pages. For example, Meta Pixel may measure a confirmed RSVP using the public event ID, party size, zero RSVP value and public widget context. It may use the Meta click ID (fbclid) in the landing URL and first-party _fbc / _fbp cookies for attribution. Organizer Google Ads tags may also use consented click IDs (gclid, gbraid, wbraid) and _gcl_* cookies. Gigiii does not put guest names, emails or order IDs in these event parameters. Google ad-personalization and ad-user-data consent remain denied.
| Cookie / technology | Provider | Purpose | Typical lifetime |
|---|---|---|---|
| _fbp, _fbc | Meta (organizer-controlled Pixel) | Browser and click attribution for an organizer's advertising measurement | Per Meta settings |
| gcl* | Google Ads (organizer-controlled tags) | Ad click attribution | Per Google settings |
If you decline Marketing, these advertising tags must not fire from gigiii. If you withdraw Marketing, gigiii updates the consent signal, clears listed first-party advertising cookies where accessible, and reloads the page to stop previously loaded tags. Earlier requests cannot be recalled. The organizer and its advertising providers may process browser, device, network and conversion data under their own terms. The separate email marketing preference does not control these cookies.
Maps, external content and ticketing
When maps are displayed, the browser requests map tiles from CARTO; CARTO receives the request information, including IP address. Location search may send the search query to Google Places or, for a limited fallback, to Nominatim. These features are not advertising technologies.
Public pages may also contain privacy-enhanced YouTube embeds. If you play an embedded video, YouTube may process your request and set its own cookies under its policy.
On unlisted public event pages with paid tickets, gigiii may load the pretix Hosted widget (pretix.eu), which can set its own cookies for checkout. Those cookies are governed by pretix’s privacy policy. gigiii does not use the widget for advertising.
Support chat
On signed-in pages, we load the Tawk.to support widget only after you accept Functionality in Cookie Preferences. It may use tawk_uuid_* to recognize a returning chat visitor, twk_idm_key and TawkConnectionTime to manage the connection, and local storage to keep the conversation working across pages. Tawk.to says its visitor identifier may last up to six months; connection cookies are session-based. See Tawk.to's cookie explanation.
If you withdraw Functionality consent, we stop the chat widget, clear listed first-party Tawk cookies where the browser allows it, and reload the page. Earlier requests and any storage controlled by Tawk.to cannot be recalled by this setting. You can also clear browser storage or contact us about your chat data.
Manage Your Cookie Preferences
You can change your cookie preferences at any time by clicking the button below. Your choices will be saved and applied across your sessions.
Browser Settings
Most web browsers allow you to control cookies through settings. However, disabling necessary cookies may prevent you from using essential features of gigiii. Consult your browser's help documentation for cookie management instructions.
Contact Us
For questions about our cookie practices, contact us at hello@gigiii.com
Public traffic sources and campaigns
With Analytics consent, Gigiii measures public profile/event views and sources, campaign labels and their association with confirmed RSVPs and native paid orders. A random first-party session identifier and bounded acquisition context are stored in browser sessionStorage. The session expires after 30 minutes of inactivity; closing the tab also ends its storage. The database keeps source measurements and RSVP/order source snapshots for 90 days, then deletes/clears them through scheduled cleanup. Operational attendance and payment records follow their separate retention policy. Withdrawal clears acquisition storage and stops further tracking; already collected source records remain subject to the 90-day period.
This optional device storage/access uses consent under §25(1) TDDDG; subsequent measurement and source linkage use consent under Article 6(1)(a) GDPR. Referrers are reduced to hostnames. Campaign tags must not contain personal data. This feature does not store raw advertising click IDs or send attendee names/emails, payment credentials or full referrer URLs to analytics. Source context may go to the existing configured Google/event-organizer analytics destinations with Analytics consent, and to Meta only with both Analytics and Marketing consent. Anonymous session IDs stay with Gigiii and its existing Vercel/Neon processors. Owners see aggregates with small-group protections, not attendee-level sources. Host-site widget consent does not grant consent on Gigiii. Provider retention and privacy-rights contacts remain as described in this notice and the provider list. You may decline this measurement and still RSVP or buy tickets.