Operator: TOURINGTUNES Sp. z o.o., ul. Złota 7 lok. 28, 00-019 Warszawa ([privacy@strobo.events]).
This policy covers both strobo.events (the marketing site) and app.strobo.events (the product). Your cookie choice is stored on the shared parent domain .strobo.events, so a decision made on one applies to the other.
1. Categories
You control three categories; the first is not a choice.
Necessary (always on, no consent required): session and security cookies, locale preference, the cookie-consent choice itself, checkout/reservation state, fraud prevention. Necessary for the service to function (art. 173 ust. 3 Prawa telekomunikacyjnego / ePrivacy).
Analytics (consent required): anonymous, aggregated measurement of how the site is used.
Marketing (consent required): measuring the performance of our advertising across ad platforms.
Session recording (consent required, separate): anonymous recordings of on-page activity with inputs masked. This is a separate consent from marketing because recording a visitor's screen is a different purpose from measuring an ad; it cannot ride on the marketing tick.
Nothing in Analytics, Marketing or Session recording loads before you accept it. Google tools additionally run in Consent Mode v2 with every signal defaulted to "denied" until you choose.
2. Your choices
The banner offers Accept all and Reject all as equally prominent options on the same layer, plus Settings for per-category control. Nothing is pre-ticked; there is no "legitimate interest" for marketing. Declining never blocks buying tickets. You can change or withdraw your choice at any time via Cookie settings in the footer of any page. Withdrawing a category stops further processing and reloads the page to stop tools that had already loaded; it does not undo data already collected.
3. Technologies (consent-based)
Each is loaded only after you accept its category. Ids are configured per environment; a tool with no id configured is never loaded.
| Technology | Category | Purpose | Provider (controller/processor) | Typical storage | Leaves the EU? | Transfer mechanism |
|---|---|---|---|---|---|---|
Google Analytics 4 (_ga, _ga_*) |
Analytics | Aggregated visit and conversion measurement | Google Ireland Ltd / Google LLC (US) | _ga 2 years; _ga_* 2 years |
Yes (US) | EU–US Data Privacy Framework (Google LLC certified) + SCCs |
Meta Pixel (_fbp) |
Marketing | Ad performance and conversion measurement (Facebook/Instagram) | Meta Platforms Ireland Ltd / Meta Platforms Inc. (US) | _fbp 90 days |
Yes (US) | EU–US Data Privacy Framework (Meta certified) + SCCs |
TikTok Pixel (_ttp) |
Marketing | Ad performance and conversion measurement (TikTok) | TikTok Technology Ltd (Ireland) / TikTok Inc. (US) and group companies | _ttp 13 months |
Yes (US and other third countries) | Standard Contractual Clauses (not DPF-certified) |
LinkedIn Insight Tag (li_*, bcookie, lidc) |
Marketing | Ad performance and conversion measurement (LinkedIn) | LinkedIn Ireland Unlimited Co. / Microsoft Corp. (US) | bcookie 1 year; lidc 1 day; li_gc 180 days |
Yes (US) | EU–US Data Privacy Framework (Microsoft/LinkedIn certified) + SCCs |
Hotjar (_hjSessionUser_*, _hjSession_*) |
Session recording | Anonymised session recordings and heatmaps, inputs masked | Hotjar Ltd (Malta, Contentsquare group) / US sub-processors | _hjSessionUser_* 1 year; _hjSession_* 30 min |
Yes (US sub-processors) | Standard Contractual Clauses |
Providers' own policies: Google, Meta, TikTok, LinkedIn, Hotjar. Where an Organizer enables their own pixels on their public event pages, the Organizer is joint/independent controller for that data; the same categories and prior-consent rules apply.
4. Necessary cookies and local storage
| Name | Store | Purpose | Lifetime |
|---|---|---|---|
| Clerk session / auth | Cookie | Login/session (app only) | session–30 d |
locale |
Cookie | Language preference | 12 m |
strobo_consent |
Cookie | Stores your cookie choice (shared across .strobo.events) |
13 m |
strobo_anon |
localStorage | A random identifier (no name, email or profile) tying your successive consent decisions to one record, so we can demonstrate what you chose and when | No expiry — persists until you clear site data |
| reservation/checkout state | Cookie | Holds your ticket reservation (app only) | ≤ 1 h |
strobo_anon is a persistent identifier in your browser's local storage. It is written the first time you answer the banner — including if you refuse everything — because it is what evidences your refusal and lets us avoid re-asking you. It is strictly necessary for that purpose, carries no identifying data, and is never used for analytics, marketing or recording. It has no expiry and remains until you clear your browser's site data for this site.
5. Consent record
We keep an auditable record of consent decisions (a random identifier, the time, the categories chosen, the wording version, IP, user agent and which surface asked) to demonstrate consent as required by GDPR Art. 7(1). This record is retained for 24 months and then deleted; IP and user agent are kept only as evidence of the decision.
6. Contact
Questions: [privacy@strobo.events]. See also the Privacy Policy at /legal/privacy.
(Both language versions of this document are kept identical pending the Polish legal translation; the final cookie table will be regenerated from the production cookie audit before publication.)