Last updated: 2026-10-05 — v1.3.0

Cookie Policy

This Cookie Policy explains what cookies and similar technologies Veloxshot uses, what they do, and how you can control them.

What are cookies?

Cookies are small text files that are saved on your device when you visit a website. They allow the site to recognize you on subsequent visits and save your preferences. Similar technologies, such as your browser's local storage and session storage, work in a comparable way. Some are indispensable for the site to function; others help us understand how the site is used or measure our advertising.

How we group cookies

We group cookies into three categories. You decide which non-essential categories you allow:

1. Strictly Necessary

Required for Veloxshot to function. They cannot be deactivated. They include:

Authentication — keeps you logged into your session (set by our authentication provider).
Cart — saves the photos and clips you selected until you complete the purchase (browser localStorage).
Search results — keeps the results of your selfie search while you browse them (browser sessionStorage, cleared when you close the tab). It contains the matched photographs and clips, never your selfie or any facial data.
Language — remembers the language you chose.
Cookie Consent — saves your choices about cookies (vlx_consent, 13 months).
Selfie-search consent — records that you gave your express consent to the selfie search and the version of the notice you accepted, so that we do not ask you before every search (vlx_biometric_consent, 1 year). It is set only when you give that consent.

2. Analytics

Helps us understand how the site is used so we can find and resolve issues, and lets photographers see how many people viewed their work. Deactivated by default.

Google Analytics (Google) — measures how visitors move through the site so we can find pages that are slow, broken, or confusing. It writes cookies named _ga and _ga_<id>. It is configured not to use the data for advertising.
Visitor measurement identifier — a random identifier (vlx_vid, 13 months) that lets us tell repeat visits apart from new ones without knowing who you are. It contains no name, email, or account reference, and it is never used to build an advertising profile. It is what allows a photographer to be told "42 people viewed this album" rather than "this album was opened 300 times".

If you decline Analytics, none of the above is set, and any that already exist are deleted immediately. We still count album and photo views, because a photographer needs to know their work is being seen — but without a stored identifier those counts cannot distinguish you across days, so you are counted as a fresh visitor each day and never recognised over time.

3. Marketing

Used to measure the effectiveness of our advertising on Meta platforms (Facebook and Instagram). Deactivated by default.

Meta Pixel (Meta Platforms) — records page views and the following actions on Veloxshot: viewing an event, searching an event (by bib number or selfie), adding to cart, starting checkout, and completing a purchase (amount and currency). For searches, including a search made with a selfie, it only receives the event identifier — never your selfie, any facial data, the bib number you searched, or your results. It writes the cookies _fbp (about 90 days) and, if you arrived from a Meta ad, _fbc (about 90 days).
Meta Conversions API — with the same consent, our servers send Meta those same actions together with your IP address, your user agent, the _fbp/_fbc identifiers and, except for purchases, the address of the page without its query parameters, and, for completed purchases, your email address in hashed form (SHA-256). More details in the Privacy Notice.

If you decline Marketing, the Meta Pixel does not load, nothing is sent to Meta from our servers, and the _fbp and _fbc cookies are deleted if they exist.

How to change your choice

You can change your cookie preferences at any time via the Privacy preferences link in the website footer, where you can also withdraw your consent to the selfie search. If you are signed in, your choice is also saved in your account so that it is preserved across devices.

Third-Party Cookies

Provider	Purpose	Category
Authentication provider	Login session	Strictly Necessary
Stripe	Payment processing on the checkout page	Strictly Necessary
Google (Google Analytics)	Site usage measurement	Analytics (opt-in)
Meta Platforms (Meta Pixel)	Advertising measurement	Marketing (opt-in)

Updates to this policy

We publish each new version of this Cookie Policy on this page. If you have an account, you will be asked to accept the new version the next time you use Veloxshot while signed in. When a change affects the trackers included in a category, we will ask all visitors again to confirm or adjust their preferences. The version of the policy you accepted will be recorded.

Contact

Do you have any questions? Write to us at support@veloxshot.com.

What are cookies?

How we group cookies

We group cookies into three categories. You decide which non-essential categories you allow:

1. Strictly Necessary

Required for Veloxshot to function. They cannot be deactivated. They include:

Authentication — keeps you logged into your session (set by our authentication provider).

Cart — saves the photos and clips you selected until you complete the purchase (browser localStorage).

Search results — keeps the results of your selfie search while you browse them (browser sessionStorage, cleared when you close the tab). It contains the matched photographs and clips, never your selfie or any facial data.

Language — remembers the language you chose.

Cookie Consent — saves your choices about cookies (vlx_consent, 13 months).

Selfie-search consent — records that you gave your express consent to the selfie search and the version of the notice you accepted, so that we do not ask you before every search (vlx_biometric_consent, 1 year). It is set only when you give that consent.

2. Analytics

Helps us understand how the site is used so we can find and resolve issues, and lets photographers see how many people viewed their work. Deactivated by default.

Google Analytics (Google) — measures how visitors move through the site so we can find pages that are slow, broken, or confusing. It writes cookies named _ga and _ga_<id>. It is configured not to use the data for advertising.

Visitor measurement identifier — a random identifier (vlx_vid, 13 months) that lets us tell repeat visits apart from new ones without knowing who you are. It contains no name, email, or account reference, and it is never used to build an advertising profile. It is what allows a photographer to be told "42 people viewed this album" rather than "this album was opened 300 times".

3. Marketing

Used to measure the effectiveness of our advertising on Meta platforms (Facebook and Instagram). Deactivated by default.

Meta Pixel (Meta Platforms) — records page views and the following actions on Veloxshot: viewing an event, searching an event (by bib number or selfie), adding to cart, starting checkout, and completing a purchase (amount and currency). For searches, including a search made with a selfie, it only receives the event identifier — never your selfie, any facial data, the bib number you searched, or your results. It writes the cookies _fbp (about 90 days) and, if you arrived from a Meta ad, _fbc (about 90 days).

Meta Conversions API — with the same consent, our servers send Meta those same actions together with your IP address, your user agent, the _fbp/_fbc identifiers and, except for purchases, the address of the page without its query parameters, and, for completed purchases, your email address in hashed form (SHA-256). More details in the Privacy Notice.

If you decline Marketing, the Meta Pixel does not load, nothing is sent to Meta from our servers, and the _fbp and _fbc cookies are deleted if they exist.

Provider

Purpose