Photo9We use cookies to improve your browsing experience and analyse site traffic. This notice explains what cookies we use and how you can control them.
This Cookie Notice explains how Photo9 ("we", "us", "our") uses cookies and similar tracking technologies on our website. It should be read alongside our Privacy Notice.
We operate under the EU General Data Protection Regulation (GDPR) 2016/679, the UK GDPR, and the ePrivacy Directive 2002/58/EC (as amended by 2009/136/EC). Under Article 5(3) of the ePrivacy Directive, we may only store non-essential cookies on your device with your prior, freely given, specific, and informed consent.
Cookies are small text files placed on your device when you visit a website. They allow the site to remember information about your visit. We also use similar storage technologies such as localStorage and session storage.
Cookies can be:
Session cookies — deleted automatically when you close your browser.
Persistent cookies — remain on your device for a defined period or until you delete them.
First-party cookies — set directly by Photo9.
Third-party cookies — set by external services we use (e.g. analytics, advertising).
We group cookies into four categories. You can manage your preferences for categories 2–4 through our consent banner or by contacting us. Category 1 cookies cannot be disabled as they are essential for the site to function.
These cookies are required for the website to operate. They do not require your consent under the ePrivacy Directive.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
next-auth.session-token / __Secure-next-auth.session-token | Photo9 | Keeps you logged in across pages. Stores an encrypted session token — no personal data is readable by JavaScript. | Session / 30 days (if "Remember me" is selected) |
next-auth.csrf-token | Photo9 | Cross-Site Request Forgery protection token, preventing malicious third-party sites from submitting actions on your behalf. | Session |
colorMode | Photo9 | Stores your chosen light/dark theme preference so it is applied on your next visit. | 1 year |
consent (localStorage) | Photo9 | Records which cookie categories you have accepted or rejected so we do not re-show the consent banner unnecessarily. | 1 year |
These cookies help us understand how visitors use our website (e.g. which pages are visited most, how long sessions last). We use this information to improve our service. These cookies are only activated after you give consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique users by assigning a randomly generated number. Used to calculate visitor, session, and campaign data. | 2 years |
_ga_* | Google Analytics | Stores and updates a unique value for each page visited. | 2 years |
_gid | Google Analytics | Distinguishes unique users (short-lived counterpart to _ga). | 24 hours |
ph_* (localStorage) | PostHog | Records anonymous session data including page views, clicks, and feature usage to help us improve the product experience. Data is stored within the EU. | Up to 1 year |
| Vercel Analytics | Vercel | Collects anonymised performance metrics (page load times, Web Vitals). Does not use persistent cookies; uses a privacy-friendly fingerprinting approach without cross-site tracking. | Session / no persistent cookie |
We have configured Google Analytics with IP anonymisation enabled and with ad_storage, ad_user_data, and ad_personalization set to denied by default. These signals are only upgraded to granted if you also accept Marketing cookies.
Marketing cookies track your activity across websites to help us deliver relevant advertising and measure campaign effectiveness. These cookies are only activated after you give consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta (Facebook) Pixel | Identifies browsers for advertising measurement and retargeting on Facebook and Instagram. | 3 months |
_fbc | Meta (Facebook) Pixel | Stores the click identifier when you arrive at our site via a Facebook ad link. | 3 months |
Google Tag Manager (GTM) is used to manage and deploy analytics and marketing scripts. GTM itself does not set tracking cookies, but it may trigger the scripts in categories 2 and 3 above. GTM is only loaded after the relevant consent has been obtained.
Our consent banner — When you first visit our site, you are presented with a cookie banner allowing you to accept or decline analytics and marketing cookies. You can change your preferences at any time by clicking "Manage cookie preferences" in the website footer.
Your browser settings — All major browsers allow you to delete or block cookies. Please note that disabling strictly necessary cookies will prevent key features (such as logging in) from working. Guidance for common browsers:
Third-party opt-out tools:
Google Analytics: tools.google.com/dlpage/gaoptout
Meta (Facebook): facebook.com/settings/?tab=ads
PostHog: You may request opt-out by contacting us at customer.service@photonine.ai
You have the right to withdraw your consent at any time (GDPR Article 7(3)). Withdrawing consent is as easy as giving it — use the "Manage cookie preferences" link in the footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Our website is not directed at children under 16. We do not knowingly set non-essential cookies for users we identify as being under 16.
We will update this notice when we add or remove cookies or when legal requirements change. The "Effective Date" at the top of this page reflects the date of the most recent update. We encourage you to review this notice periodically.
For any questions about how we use cookies, please contact our Data Protection team:
Email: customer.service@photonine.ai
Postal address: Media Rex Alliance BV, Barbara Strozzilaan 201, 1083 HN Amsterdam, The Netherlands
You may also lodge a complaint with the relevant supervisory authority:
UK: Information Commissioner's Office (ICO) — ico.org.uk
Netherlands: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
Germany: Bundesdatenschutzbeauftragter (BfDI) — bfdi.bund.de