What cookies are
Cookies are small files a website saves in your browser. Guestflock uses only the ones it needs to work. Because they are strictly necessary, they work whatever you answer to the cookie notice we show on your first visit; "Essential only" and "Accept" behave the same today. If we ever add optional cookies (such as analytics), they will stay off unless you choose "Accept", and we will ask you again first. You can change your answer any time with "Cookie settings" at the bottom of our pages [lawyer to confirm this notice meets NDPA 2023 / GAID 2025 expectations for strictly necessary cookies].
The cookies we set
| Name | What it does | How long |
|---|---|---|
gf_session | Keeps a host or organizer signed in. Only a hash of it is stored on our side. | 30 days, or until you sign out |
gf_oauth_state | Protects "Continue with Google" sign-in from being hijacked | 10 minutes |
gf_guest_<event> | Keeps a guest's phone joined to one event, so they don't have to join again | 30 days |
gf_ref | Remembers which organizer's referral link you followed, so they can be credited if you sign up | 30 days |
gf_staff | Keeps a Guestflock staff member signed in to the admin portal (admin.guestflock.com only) | Up to 8 hours |
All of them are "httpOnly" (the page's scripts can't read them) and are sent only over secure connections on the live site.
Settings saved in your browser
| Name | What it does |
|---|---|
theme | Remembers if you switched between light and dark mode |
gf:cookie-choice | Remembers your answer to the cookie notice, so we don't ask again |
gf:album-email-prompt:<event> | Remembers that you closed the "Email me the album" prompt for an event |
These stay on your device and are never sent to us.
Other services
- When you pay, you go to Paystack's checkout page, which uses its own cookies under Paystack's policies.
- "Continue with Google" takes you to Google, which uses its own cookies.
- The support button opens a chat with our team on WhatsApp (wa.me, run by Meta) only when you tap "Chat on WhatsApp"; WhatsApp uses its own cookies and policies. Nothing from WhatsApp loads on our pages before you tap it.
- [If error reporting (Sentry) is enabled: it records technical details of errors, with personal details removed, and does not set cookies — to be confirmed when it is switched on.]
We don't use advertising or analytics trackers.
Your choices
You can delete cookies in your browser settings at any time. If you do, you'll be signed out, and as a guest you'll need to join the event again (your photos stay).
Contact
[Company legal name], [registered address]. Data Protection Officer: [DPO email].
Versions
- v1Effective 20 October 2026You’re reading this
This is the first version. When it changes, earlier versions stay listed here.