Cookies and local storage

We use Firebase Authentication state for host sign-in, a locale preference cookie/localStorage value, and guest localStorage values for anonymous guest token and guest name.

These values are needed to keep the product usable: sign-in, language preference, and guest upload identity.

We use Umami, a privacy-focused analytics service that stores no cookie and builds no cross-site profile, to count page views and product milestones such as an album being created.

When a visit arrives from one of our ads, the campaign it came from is kept in sessionStorage for that browsing session only, so we can tell which campaigns work. It is discarded when you close the tab.

We also load the Google Ads tag to measure the results of our advertising. It runs with consent signals set to denied, which means it writes no advertising cookie, stores no identifier on your device and cannot be used to personalise ads to you.

No retargeting or behavioural profiling cookies are installed by JoinAlbum.

If a tool that does store such identifiers is added later, this page and a consent experience must be put in place before it runs.