Small files that keep event links and sessions working.

Essential cookies

10AM uses a separate essential guest-session cookie for each event you join, so an anonymous identifier is not reused across unrelated events. Cookie names begin with disposable_guest_session_ followed by a one-way event scope. They are protected from client-side script access and may remain in the browser for up to 180 days.

When you open a gallery or photo link, 10AM also stores one random, script-inaccessible reporter scope in tenam_gallery_reporter_v1 for up to 30 days. The server combines it with the event scope using a one-way secret-key hash so different link recipients do not share a report limit and a page reload cannot reset that limit. The raw cookie value is not stored with a photo report or moderation alarm.

When you open your camera, countdown or an album whose link you received, 10AM remembers up to eight recently opened rolls in tenam_resume_v1, so the homepage can offer a one-tap way back. It contains only each roll’s public address, when you last opened it, when the roll expires, whether you hid it on this device and, for albums, a one-way proof made with a secret server key that this browser opened the current album link. It never contains the album link or any key, and on its own it grants no access: every use is checked again on the server. Script access is blocked, and the cookie expires with the last roll it lists, at most after 400 days. Choosing “Hide on this device” hides a roll until you open it again.

Language choice

When you pick a language in the language switch, 10AM stores that choice in the essential cookie tenam_locale_v2 for up to one year, so pages open in your language. It is protected from client-side script access, contains only the language code, and is removed when you choose “Match browser”.

Account sessions and remembered terms

When you sign in on the web, Supabase stores your account session in this browser’s local storage so you can stay signed in. Signing out removes the saved session; clearing site data also removes it. When you accept the guest rules, 10AM stores an acceptance marker in local storage so you do not have to accept the same rules again when joining another roll in this browser. This marker has no automatic expiry and remains until site data is cleared. It records acceptance of the Terms, not consent to advertising or optional data processing. Local storage is separate from cookies and can also be removed through your browser’s site-data settings.

Necessary local upload queue

When you take a photo in the browser, 10AM may temporarily store the captured photo, its thumbnail, and upload state in browser IndexedDB so an interrupted upload can resume. This storage is necessary for the upload function you requested. It is removed after the upload is completed or the queue is cleared; it is not a second server-side gallery.

Analytics

We record minimal product events such as camera opened, upload started, reveal opened, and downloads. Some interactions are reported by the browser to our server using the existing event session. These internal analytics events are stored in Supabase and may be linked to the relevant event or guest session for aggregate event reporting; they are not third-party advertising cookies. We also retain aggregate daily product counters without account, event, guest, photo, or device identifiers after the underlying service records are deleted. We do not currently use third-party analytics or marketing cookies.

Third parties

The web application and production server functions are hosted by Vercel, with production functions configured in Frankfurt (fra1). Supabase provides database, authentication, storage, and internal analytics services from Central EU (Frankfurt, eu-central-1). Vercel’s static delivery network is global. The website does not load a payment provider; purchases in the iOS app are processed by Apple. No third-party advertising or analytics tool is currently enabled. These providers may use their own technical storage and subprocessors as needed to provide their services.

Choices

You can control cookies in your browser settings. Blocking essential cookies may prevent event creation, guest joining, camera uploads, or gallery access from working.