Cookie Policy

Cookies are small text files a website stores in your browser. Local storage (and session storage) are similar browser mechanisms that let a site remember small pieces of information on your device. Both are used to make a site work, to keep you signed in, or to remember your preferences.

Throughout this policy we use "cookies" loosely to cover both real cookies and equivalent local-storage entries, and we tell you specifically which one applies in each case. We only place these on your device where it is necessary to deliver the part of BoothMemo you are using.

BoothMemo is EU-built and privacy-first, and our cookie footprint reflects that:

• No advertising cookies. We do not run ad networks, retargeting pixels, or cross-site ad trackers.
• No third-party profiling or behavioural-tracking cookies.
• No cookie wall. We do not block access until you accept optional tracking, because we do not set optional tracking by default.
• The cookies we do set are strictly necessary to run the product, plus one preference value (your chosen language) that you control by switching languages.

The marketing website at boothmemo.com is intentionally light on tracking — by default it does not load advertising or third-party analytics trackers. If we ever introduce optional analytics, we will update this policy and ask for your consent first where the law requires it.

These cookies are essential for BoothMemo to function. Without them, you could not sign in, stay signed in, or run a live booth. Under EU/UK ePrivacy rules these do not require consent, because you cannot use the service without them. We use:

• Operator / admin authentication cookie — set after a PRO operator or DIRECT host signs in to the dashboard. It keeps you logged in across pages so you do not have to re-enter your password on every screen. It is a signed session token (cryptographically signed so it cannot be forged or tampered with), marked secure and HTTP-only where supported, and it expires after about 24 hours (or when you sign out). It carries no advertising or profiling data.
• Booth-session cookie — set when a tablet is turned into a live, branded booth for an event. It identifies which event and booth the tablet is currently running so guests see the correct branding and so their recording is attached to the right event. It lasts for the booth session.

Because these are required to operate the service, they are not optional. Blocking them in your browser will break sign-in and the booth.

To give you the platform in your language, BoothMemo remembers your language choice in your browser's local storage (stored under a key named `bm_lang`). The booth and marketing site support English, Romanian, German and Spanish.

• It stores only a short language code (for example `en`, `ro`, `de`, `es`).
• It contains no personal data, no identifiers, and nothing used for advertising.
• It is set when you change the language and persists on your device until you change it again or clear your browser storage.

This is a convenience preference, not a tracking mechanism. If it is not present, BoothMemo simply falls back to a default language.

For clarity, BoothMemo does not set:

• Advertising or marketing cookies — no ad-network tags, no retargeting/remarketing pixels, no "people also bought" style trackers.
• Cross-site tracking or social-media tracking pixels.
• Third-party behavioural-analytics cookies that profile you across sites.

Guest recordings (video, selfie, audio) are never delivered or monetised through advertising cookies. A guest's recording is returned to them through a private, unique QR code or email link — not through any ad or tracking technology.

BoothMemo runs on a small number of trusted infrastructure providers ("sub-processors"). These are used to operate the service, not to advertise to you. Any cookies or storage they set are for hosting, security, and delivery — not for cross-site ad tracking:

• Vercel — hosting and content delivery for boothmemo.com and the app. May set operational cookies needed to serve and protect the site (for example, load balancing or security).
• Supabase — our EU database and file storage. Used to store operator accounts and guests' recordings; it underpins authentication and data storage rather than placing tracking cookies on the marketing site.
• Resend — used only to send transactional delivery emails (for example, sending a guest their recording link). Email delivery does not place cookies on your browser.

These providers act under contract and on our instructions. Where a provider sets its own operational cookies, that processing is governed by the provider's own terms; we limit our use of them to running the service.

Because our cookies are strictly necessary or are a preference you set yourself, there is no advertising consent banner to manage. You can still control storage on your device:

• Browser settings. Every major browser lets you view, block, or delete cookies and clear local storage. Search your browser's help for "clear cookies" or "site data."
• Clear the language preference. Clearing your browser's site data for boothmemo.com removes the `bm_lang` language value; BoothMemo will then use a default language until you choose again.
• Be aware of the trade-off. If you block the strictly-necessary cookies (operator/admin auth and booth-session), you will not be able to stay signed in or run a booth — the service will not work correctly.

If we ever add optional (for example, analytics) cookies, we will provide a clear consent control and update this policy.

BoothMemo serves two customer types: PRO operators who run branded booths for their own clients, and DIRECT hosts who run a tablet at their own event. In data-protection terms:

• The operator or host is the controller of their guests' recordings; BoothMemo (Cleoda SRL) acts as their processor.
• BoothMemo is the controller of operator/host account data (for example, the login that the auth cookie keeps active).

The authentication and booth-session cookies described above keep this separation working: they tie a session to the right account and the right event, and tenant data is isolated at the database level so one operator can never see another's data.

We may update this Cookie Policy if our product or our use of cookies changes — for example, if we introduce optional analytics or a new infrastructure provider. When we make a material change, we will revise the "last reviewed" date at the top and, where the law requires it, ask for your consent before placing any new non-essential cookies.

Questions about cookies, this policy, or how BoothMemo handles your data? Get in touch:

• Operator: Cleoda SRL (Romania, EU), operating the BoothMemo brand
• Email: contact@cabinaregala.ro

If you are an event guest and want your recording deleted, you can use the delete link tied to your recording, or contact the operator/host who ran your event (they are the controller of your recording). You can also reach us at the email above and we will help route your request.

---

*This document is a plain-English template provided for transparency. It is not legal advice and should be reviewed by a qualified lawyer before you rely on it.*