Eventonite

Legal

Eventonite Cookie Policy

Effective date: 9 November 2026

This Cookie Policy explains which cookies and similar technologies Eventonite uses on its website, its app, its scanner app and organizer event pages, and why. It is based on Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive) and Section 155(4) of the Hungarian Electronic Communications Act (Act C of 2003, "Eht."). Under these rules, information may be stored on or read from your device without your consent only where this is strictly necessary to provide a service you have explicitly requested. Where we, or an organizer on their event pages, use analytics or advertising cookies, we ask for your consent first and load nothing optional before you choose.

Operator: Tokolics Attila ev. (Hungarian sole proprietor), 8481 Somlóvásárhely, Vásár u. 12., Hungary
Contact: support@eventonite.com

For how we process personal data in general, see our Privacy Policy (https://eventonite.com/privacy).

1. What are cookies and local storage?

Cookies are small text files that a website stores in your browser. Your browser sends them back to the website on later visits, so the website can recognise, for example, that you are logged in.

Local storage and IndexedDB are similar browser features that let a website keep information on your device. Unlike cookies, they are not sent to the server automatically, and they stay on your device until they are deleted.

2. The short version

  • Essential cookies and storage (keeping you logged in, your ticket selection, your cookie choice) are always on; they need no consent.
  • On our website (eventonite.com) we count visits with our own cookie-free analytics (section 3.8). Only if you accept them, we also use Google Analytics (analytics) and the Meta Pixel (marketing) to see how the site is used and which ads bring organizers to us (section 4). A banner asks for your choice; "Necessary only" is one click, and nothing optional loads before you decide.
  • In the app and in the scanner app we use no analytics or advertising cookies, so there we only show a short notice bar.
  • Organizer event pages may use the organizer's own Google Analytics, Meta Pixel or TikTok Pixel, if the organizer has switched them on. They load only after you accept them in the banner shown on that organizer's pages, and the organizer is responsible for them (section 3.6).
  • You can change your choice at any time with "Cookie settings" in the footer (section 5).

3. Cookies and storage we use

Name
eventonite-session
Provider
Eventonite (first party, domain eventonite.com)
Purpose
Keeps you logged in to the app
Type
Strictly necessary cookie; Secure, HttpOnly, SameSite=Strict
Lifetime
24 hours, or 14 days if you choose "remember me"
Name
eventonite-consent
Provider
Eventonite (first party, domain eventonite.com)
Purpose
Stores your cookie choice for our website (analytics and marketing on or off) and when you made it
Type
Strictly necessary cookie: remembering your choice
Lifetime
180 days
Name
eventonite-site-consent
Provider
Eventonite (first party, set only on the organizer's own subdomain)
Purpose
Stores your cookie choice for that organizer's event pages
Type
Strictly necessary cookie: remembering your choice
Lifetime
180 days
Name
eventonite-locale
Provider
Eventonite (first party, set only on the organizer's own subdomain)
Purpose
Remembers the language you picked in the language switcher on that organizer's event pages, so the pages, the checkout and your ticket emails stay in that language; contains only the language code (for example "hu")
Type
Set only when you pick a language; preference for a feature you use; not personal data
Lifetime
1 year
Name
eventonite-attribution
Provider
Eventonite (first party, domain eventonite.com)
Purpose
Remembers the campaign labels (utm_source, utm_medium, utm_campaign, utm_content, utm_term) of the link that first brought you to our website, so that if you later sign up as an organizer we know which campaign it came from; contains no identifier
Type
Marketing measurement; set only after you accept analytics or marketing cookies
Lifetime
30 days
Name
eventonite-sidebar-state
Provider
Eventonite (first party, app)
Purpose
Remembers whether you keep the app sidebar open or closed
Type
Session cookie; preference for a feature you use; not personal data
Lifetime
Until you close your browser
Name
eventonite-events-view
Provider
Eventonite (first party, app)
Purpose
Remembers your preferred event list view (list or grid)
Type
Local storage; preference for a feature you use; not personal data
Lifetime
Until you clear it in your browser
Name
eventonite-checkout-{eventId}
Provider
Eventonite (first party, organizer event pages)
Purpose
Keeps your selected tickets (ticket type and quantity), the order reference, the Stripe checkout link and its expiry time, so you can return to an unfinished checkout; contains no name or email address
Type
Local storage; strictly necessary for the purchase you requested
Lifetime
Deleted when you complete the purchase; otherwise kept until your next completed purchase for that event or until you clear your browser data
Name
eventonite-purchase-{order reference}
Provider
Eventonite (first party, organizer event pages)
Purpose
Remembers that your completed purchase was already reported to the organizer's pixels, so that reloading the confirmation page does not count it twice; stores only the date and time
Type
Local storage; not personal data
Lifetime
Until you clear your browser data
Name
eventonite-cookie-notice-dismissed
Provider
Eventonite (first party, app and organizer event pages without pixels)
Purpose
Remembers that you closed the cookie notice bar, so it is not shown again; stores only the date and time you closed it
Type
Local storage; strictly necessary; not personal data
Lifetime
Until you clear your browser data
Name
Scanner session and offline ticket data (section 3.7)
Provider
Eventonite (first party, scanner app at scan.eventonite.com)
Purpose
Keeps the door staff member logged in to the scanner and stores the event's ticket list and the scans made on the device, so tickets can be checked without an internet connection
Type
Local storage and IndexedDB; strictly necessary for the check-in service the organizer requested
Lifetime
Until the staff member logs out, the organizer revokes the scanner access, or the browser data is cleared
Name
__stripe_mid
Provider
Stripe (third party)
Purpose
Fraud prevention and security in the embedded Stripe component on the organizer Finances page
Type
Strictly necessary cookie
Lifetime
1 year
Name
__stripe_sid
Provider
Stripe (third party)
Purpose
Fraud prevention and security in the embedded Stripe component on the organizer Finances page
Type
Strictly necessary cookie
Lifetime
30 minutes
Name
None (no cookie)
Provider
Google (Google Fonts)
Purpose
Delivering fonts in the embedded Stripe component on the organizer Finances page; your IP address is sent to Google
Type
Font request, no cookie set by us
Lifetime
Not applicable
Name
_ga
Provider
Google (Google Analytics); on our website with your consent, or on an organizer's pages with your consent given there
Purpose
Tells visitors apart with a random identifier
Type
Analytics cookie; consent
Lifetime
2 years
Name
_ga_{measurement id}
Provider
Google (Google Analytics)
Purpose
Keeps the state of your current visit (session)
Type
Analytics cookie; consent
Lifetime
2 years
Name
_fbp
Provider
Meta (Meta Pixel); on our website with your consent, or on an organizer's pages with your consent given there
Purpose
Tells browsers apart for Meta's ad measurement
Type
Marketing cookie; consent
Lifetime
90 days
Name
_fbc
Provider
Meta (Meta Pixel)
Purpose
Stores the identifier of the Meta ad you clicked, so a later sign-up or purchase can be attributed to that ad
Type
Marketing cookie; consent
Lifetime
90 days
Name
_ttp
Provider
TikTok (TikTok Pixel); only on organizer pages where the organizer enabled it, with your consent given there
Purpose
Tells browsers apart for TikTok's ad measurement
Type
Marketing cookie; consent
Lifetime
13 months
Name
_tt_enable_cookie
Provider
TikTok (TikTok Pixel)
Purpose
Records that the TikTok Pixel may set cookies in your browser
Type
Marketing cookie; consent
Lifetime
13 months
Name
ttcsid, ttcsid_{pixel id}
Provider
TikTok (TikTok Pixel)
Purpose
Identifies your current visit (session) for TikTok's measurement; TikTok may also set further cookies listed at https://ads.tiktok.com/help/article/using-cookies-with-tiktok-pixel
Type
Marketing cookie; consent
Lifetime
13 months

3.1 Session cookie

When you log in to the Eventonite app, we set one session cookie, eventonite-session. It contains a random session identifier and is used only to keep you logged in. It is:

  • Secure: sent only over encrypted (HTTPS) connections,
  • HttpOnly: not readable by scripts on the page,
  • SameSite=Strict: not sent with requests coming from other websites,
  • valid across eventonite.com subdomains, including organizer event pages,
  • valid for 24 hours, or 14 days if you tick "remember me".

Without this cookie you cannot log in, so it is strictly necessary and does not require consent.

3.2 App display preferences

The app remembers two display choices you make. Your preferred view of the event list (list or grid) is kept in your browser's local storage (eventonite-events-view) and is never sent to us. Whether you keep the sidebar open or closed is kept in a small cookie (eventonite-sidebar-state) that is deleted when you close your browser. Neither contains personal data; they only make the app look the way you left it.

3.3 Consent banner and cookie notice bar

On our website (eventonite.com) a banner asks for your choice on your first visit. You can click "Accept all", "Necessary only", or "Manage" to switch analytics and marketing cookies on or off separately. Until you choose, no analytics or advertising script loads; only essential cookies and our cookie-free visit counter (section 3.8) run. Your choice is stored in the eventonite-consent cookie for 180 days. It is valid across eventonite.com and its subdomains, including the app, so that the app's sign-up form can respect it (section 4.3). You can change your choice at any time with "Cookie settings" in the footer. If we add a category or change what one means, the banner asks you again.

In the app, in the scanner app and on organizer event pages whose organizer has not enabled any pixel, we use no optional cookies, so we show only a short notice bar telling you this. It does not block the page and does not ask for consent. When you click "Got it", your browser's local storage records the date and time you closed it (eventonite-cookie-notice-dismissed), so the bar is not shown again. This entry contains no personal data and is never sent to us. Browsers keep local storage separately for each site, so you may see the bar once in the app and once on each organizer's pages. If you clear your browser storage, the bar appears again.

On organizer event pages where the organizer has enabled a pixel, a separate banner asks for your choice for that organizer's pages (section 3.6).

3.4 Stripe on the organizer Finances page

The Finances page of the organizer app contains an embedded component provided by Stripe, which connects the organizer's own Stripe account. Stripe sets its own cookies in this component (__stripe_mid and __stripe_sid). These are strictly necessary for fraud prevention, security and processing payments. Stripe is responsible for these cookies. For details, see Stripe's Cookie Policy (https://stripe.com/legal/cookies-policy) and the list of cookies on Stripe's Cookies & Consent Settings (https://stripe.com/cookie-settings) page.

3.5 Website and fonts

Our website (eventonite.com) sets the eventonite-consent cookie when you make your choice and, if you accept analytics or marketing cookies and arrived through a link with campaign labels, the eventonite-attribution cookie. Google Analytics and the Meta Pixel load only after your consent (section 4). The website loads its fonts from our own servers. If you are logged in to the app, your browser also sends the session cookie to the website, because it is valid across eventonite.com. Our app also uses self-hosted fonts. The only exception is the embedded Stripe component on the organizer Finances page, which may load fonts from Google Fonts (fonts.googleapis.com). This sets no cookie, but your browser sends your IP address to Google when the fonts load.

3.6 Organizer event pages

Organizers can connect their own Google Analytics 4 property, Meta Pixel and TikTok Pixel to their event pages ({organizer}.eventonite.com) by entering the ids in their settings. We then load the official scripts from Google's, Meta's and TikTok's servers, only on that organizer's pages. If the organizer has enabled none of them, their pages load no third-party analytics, tracking or advertising tool and show only the notice bar (section 3.3).

If the organizer has enabled at least one, a banner asks for your choice on your first visit to their pages. Nothing optional loads before you choose. Your choice is stored in the eventonite-site-consent cookie for 180 days, set only on that organizer's subdomain, so it applies to that organizer's pages only, not to eventonite.com or to other organizers' pages. Google Analytics loads if you accept analytics cookies; the Meta Pixel and the TikTok Pixel load if you accept marketing cookies. They receive the pages you view, the event you look at, the tickets you select and, after payment, your completed purchase (ticket types, quantities, amount, currency and order reference), so that the organizer can see in their own Google, Meta or TikTok account which ads sold tickets. Your name and email address are never sent to them. The cookies they set are listed in section 3. You can change your choice with "Cookie settings" in the footer of the organizer's pages; a pixel that has already loaded stops sending data on your next page load.

For these tools the organizer is the controller: they decided to use them, and the data goes from your browser directly to Google, Meta or TikTok under the organizer's accounts. We only load the scripts on the organizer's instruction and receive none of the data they collect. The organizer's privacy policy, linked on their pages, applies, together with Google's (https://policies.google.com/privacy), Meta's (https://www.facebook.com/privacy/policy) and TikTok's (https://www.tiktok.com/legal/page/eea/privacy-policy/en) privacy policies. If you are logged in to the app, your browser also sends the session cookie to these pages, because it is valid across eventonite.com subdomains.

When you select tickets, the event page stores your selection and a reference to your unfinished checkout in your browser's local storage (eventonite-checkout-{eventId}), so you can go back and continue the purchase. The entry is deleted when you complete the purchase. If you leave the purchase unfinished, it stays in your browser until you complete a purchase for that event or clear your browser data. Payment itself takes place on Stripe's hosted checkout page.

When your payment is confirmed, the confirmation page stores the date and time in local storage under eventonite-purchase-{order reference}, so that reloading the page does not report your purchase to the organizer's pixels a second time. It contains no personal data and is written even if the organizer uses no pixels.

Organizer event pages are shown in your browser's language, or in the default language the organizer chose. If you pick another language in the language switcher at the top of the page, we set the eventonite-locale cookie on that organizer's subdomain for one year, so that their pages, the checkout and your ticket emails stay in the language you picked. It contains only the language code and is not set until you use the switcher. Deleting it returns the pages to the browser or organizer default.

3.7 Scanner app

The Eventonite scanner app (scan.eventonite.com) is used by the organizer's door staff to check tickets. It sets no cookies. It keeps the scanner session (the access code's session token) and, once the staff member opens an event, the event's ticket list and the scans made on that device in the browser's local storage and IndexedDB, so that tickets can be checked without an internet connection and the scans can be uploaded later. This data belongs to the organizer, who is the controller of it (see section 2 of our Privacy Policy). It stays on the device until the staff member logs out, the organizer revokes the scanner access, or the browser data is cleared.

3.8 Visitor statistics (Umami)

On our website (the eventonite.com landing and product pages) we count visits with Umami, an open-source analytics tool that we run on our own server (analytics.creati.dev), hosted by Amazon Web Services in Frankfurt, Germany. It is not used in the app, in the scanner app or on organizer event pages. It sets no cookies, stores nothing in your browser and does not track you across other websites. It only checks whether your browser has a local opt-out setting for Umami (umami.disabled), and it does not run if your browser sends a Do Not Track signal. When a page loads, the script sends us the page address, the referring website, your screen size and language. Our server also receives your IP address and browser details, which Umami uses to tell your device type and approximate country and to group your page views into a visit. Our analytics server may briefly log IP addresses for security purposes. We use these statistics only as totals and keep them for 12 months. For the legal basis and your rights, see section 10 of our Privacy Policy.

On our website it also counts, without cookies, how many visitors click a sign-up button. When an organizer signs up, starts a trial or pays their first subscription, our server reports this to Umami as an event with the campaign labels and the chosen plan; the IP address and browser details of the sign-up are included only if the person accepted marketing cookies, so that the event can be grouped with their earlier visit (see section 3.5 of our Privacy Policy).

4. Analytics and advertising cookies on our website (with your consent)

On our website (eventonite.com) we use two optional tools. Both are off until you accept them in the banner (section 3.3), and both can be switched off again at any time with "Cookie settings" in the footer. Neither is used in the app, in the scanner app or on organizer event pages (for the organizers' own tools, see section 3.6).

4.1 Google Analytics 4 (analytics)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It loads only after you accept analytics cookies; before that the script is not loaded at all. It records the pages you view, clicks on our sign-up buttons, your screen size, browser and language, and an approximate location derived from your IP address, which Google does not store. It sets the _ga and _ga_{measurement id} cookies. We have switched off Google Signals and the sharing of data with other Google products, and keep the data in Google Analytics for 14 months. Google's advertising features (ad_storage, ad_user_data and ad_personalization in Google's Consent Mode) stay denied unless you also accept marketing cookies. Google's privacy policy: https://policies.google.com/privacy; how Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites.

4.2 Meta Pixel (marketing)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It loads only after you accept marketing cookies. It reports your page views on our website to Meta and sets the _fbp and _fbc cookies. If you are logged in to Facebook or Instagram, Meta can link these page views to your account and uses them to measure our ads and, under its own responsibility, for its own purposes described in its privacy policy (https://www.facebook.com/privacy/policy). You can manage the ads you see at https://www.facebook.com/adpreferences/ad_settings.

4.3 If you sign up as an organizer

If you accepted analytics or marketing cookies and later sign up, the sign-up form sends us, together with your registration: the sign-up button you clicked and the plan you chose; the campaign labels from the eventonite-attribution cookie; with analytics consent, the Google Analytics identifiers from the _ga and _ga_{measurement id} cookies; with marketing consent, the Meta identifiers from the _fbp and _fbc cookies, and we add the IP address and browser of the sign-up request. Our server then reports your sign-up, your trial start and your first subscription payment to Google Analytics (Measurement Protocol) and to Meta (Conversions API, with your email address, name and country in hashed form), so that we can see which campaigns bring paying organizers. The identifiers, IP address and browser details are deleted 90 days after your registration; the campaign labels stay with your account. The legal basis, the recipients and your rights are described in sections 3.5, 5 and 8 of our Privacy Policy. You can decline all of this by choosing "Necessary only".

4.4 Withdrawing your consent

Open "Cookie settings" in the footer and save a new choice. Google Analytics and the Meta Pixel then stop sending data immediately and are not loaded on your next visit. Cookies already set by them stay in your browser until they expire or you delete them (section 5); data they already received is handled by Google and Meta under their policies. Withdrawal does not affect data we already received with your sign-up, but you can ask us to delete it at support@eventonite.com.

5. How to control cookies

On our website and on organizer event pages that use pixels, "Cookie settings" in the footer reopens the banner, where you can change your choice at any time. You can also opt out directly with the providers: Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout), Meta ad settings (https://www.facebook.com/adpreferences/ad_settings), TikTok ad settings in the TikTok app or at https://www.tiktok.com/legal/page/eea/privacy-policy/en.

You can view, block and delete cookies and local storage in your browser settings. Most browsers explain how in their help pages:

If you block or delete the session cookie, you will be logged out and cannot use the app until you allow it again. If you block Stripe's cookies, the Finances page may not work. If you clear the scanner app's storage, the device has to sync the event again before it can check tickets offline. If you delete the eventonite-consent or eventonite-site-consent cookie, the banner asks for your choice again.

6. Changes to this policy

We may update this Cookie Policy. We will publish the new version on this page with its effective date.

7. Contact

Questions about cookies: support@eventonite.com