1. Cookies and local storage
Cookies are small values stored by a browser and sent with relevant requests. Local and session storage keep values inside a browser. Momentale uses both to maintain secure sessions, remember workspace choices, protect guest access, operate displays, and remember your privacy choice.
2. Strictly necessary technologies
These are required to provide a requested service and cannot be disabled through Momentale's preference panel. You can block them in your browser, but login, guest access, display pairing, and saved workspace choices may stop working.
| Technology | Purpose | Typical duration |
|---|---|---|
| Momentale host/admin/guest session cookies | Authenticate the current signed-in host, protected operator, or account-free guest session. Values are HttpOnly and unavailable to frontend JavaScript. | Host: configured session lifetime; guest: renewable 90 days, maximum 12 months; admin: one hour. |
| Laravel session / CSRF safeguards | Protect state-changing requests and temporary server sessions where enabled. | Session or configured server lifetime. |
| momentale_consent | Records whether optional analytics were allowed or declined. | Six months. |
| Momentale local storage | Remembers the active album, non-secret signed-in identity display, pending collaboration invitation, and consent state. | Until removed, account deletion, logout where applicable, or browser cleanup. |
| Display session storage | Keeps an expiring Timeline Film display credential only in the paired browser tab. | Tab lifetime; presentation credentials expire within four hours. |
3. Optional analytics
Momentale may collect allowlisted product events—such as a page or feature being used—only after you select Allow analytics. Event properties are filtered to reject common personal-data fields, and anonymous identifiers are hashed before storage. Raw events are retained for 90 days.
Momentale does not use advertising cookies, cross-site behavioral advertising, or sell analytics profiles.
4. Manage your choice
Select Cookie choices in the site footer to allow or decline optional analytics. Withdrawing consent stops new browser analytics from being sent; it does not automatically erase previously lawfully collected events. You can request deletion through the privacy request form. Browser settings can also remove all Momentale cookies and storage, which will sign you out and forget saved choices.
5. Third-party pages
Stripe Checkout and Billing Portal, Google Maps, and other external pages apply their own cookie policies after you choose to open them. Embedded protected Momentale media and same-origin map proxy requests do not authorize third parties to place Momentale marketing cookies.
6. Contact
Questions about cookies and analytics can be sent to privacy@momentale.app.