Legal
Cookie Policy
The cookies IForevents sets, what they do, and how to control them
Last updated:
Cookie Types and Purpose
Essential cookies keep you signed in, protect forms against cross-site requests and remember your cookie choice. They are set without consent because the Service cannot work without them. Analytics cookies measure how the dashboard is used and are set only after you accept them in the banner. We use no advertising cookies.
Cookie Table
| Name | Purpose | Type | Set by | Expiry |
|---|---|---|---|---|
auth_token | Signed-in session for the dashboard (HttpOnly) | Essential | app.iforevents.com | 1 hour, renewed while you use the app |
refresh_token | Renews the session without signing in again (HttpOnly) | Essential | app.iforevents.com | 90 days or until you sign out |
cookie_consent | Remembers your choice in the cookie banner | Essential | app.iforevents.com | 12 months |
oauth_state | Protects Google/GitHub sign-in against forged callbacks | Essential | accounts.iforevents.com | 10 minutes |
__cf_bm, cf_clearance | Cloudflare bot protection and Turnstile challenge on the signup form | Essential (third party) | Cloudflare | up to 30 minutes / 1 day |
| Paddle checkout cookies | Payment session when you open the checkout overlay | Essential (third party) | Paddle | session |
| Dashboard usage analytics | Product analytics on the dashboard, only after acceptance | Analytics | app.iforevents.com | 13 months |
The public website (iforevents.com) sets no cookies of its own.
How to Manage Cookies
The banner on the dashboard lets you accept or reject analytics cookies; deleting the cookie_consent cookie brings the banner back so the choice can be changed. Your browser also lets you block or delete cookies (Settings > Privacy in Chrome, Firefox, Safari and Edge) and private or incognito windows discard them when closed. Blocking essential cookies will sign you out.
Opt-Out Methods
Reject analytics in the banner, or delete the cookie_consent cookie to see the banner again.
Third-Party Cookies
Cloudflare and Paddle set their own cookies on our pages for bot protection and payments; their policies are at cloudflare.com/cookie-policy and paddle.com/legal/cookies. Google and GitHub set cookies on their own domains when you sign in with them.