This Cookie Policy explains how sebavision OÜ ("Spopyyou", "we", "us" or "our") uses cookies and similar technologies when you access or use the Spopyyou website, applications and related services (collectively, the "Platform").
This Cookie Policy should be read together with our Privacy Policy.
1. What Are Cookies and Similar Technologies?
Cookies are small text files that may be stored on your device when you visit a website.
Spopyyou also uses technologies that perform functions similar to cookies, including:
localStorage;
sessionStorage;
service workers;
browser push subscriptions;
browser/device APIs;
other technologies necessary to provide Platform functionality.
For convenience, this Policy may collectively refer to these technologies as "Cookies and Similar Technologies".
2. How Spopyyou Uses Cookies
Spopyyou currently uses Cookies and Similar Technologies primarily to:
authenticate users and maintain login sessions;
protect accounts and authentication requests;
remember language and Platform preferences;
provide Platform functionality;
process eligible payments;
support identity and age verification;
provide maps and location functionality;
provide real-time communications;
provide browser notifications;
prevent fraud and abuse.
Spopyyou currently does not use analytics cookies, advertising cookies, marketing cookies, tracking pixels or session-recording technologies.
3. Essential Cookies
Essential Cookies are required for authentication, security, payments and other functionality necessary to operate the Platform.
Current Spopyyou Essential Cookies
Cookie Provider Purpose Duration
__Secure-authjs.session-token / authjs.session-token Spopyyou Maintains authenticated user session and login state 30 days
__Secure-authjs.session-token.0, .1, etc. Spopyyou Additional parts of larger authentication sessions 30 days
__Host-authjs.csrf-token / authjs.csrf-token Spopyyou Protects authentication requests Browser session
__Secure-authjs.callback-url / authjs.callback-url Spopyyou Remembers redirect destination after login/logout Browser session
spopyou_site_access Spopyyou Remembers access to the password-protected/pre-launch site while enabled 30 days
Spopyyou currently uses Auth.js with email/password authentication. Additional Auth.js cookies associated with OAuth, social login or passkeys are not currently used.
4. Functional Cookies
Functional Cookies and Similar Technologies support user preferences and optional Platform functionality.
Language Preference
NEXT_LOCALE is a first-party Spopyyou Cookie used to remember the user's selected language.
Duration: 365 days.
Pre-Launch Questionnaire
prelaunch_quiz_state uses localStorage to save progress in the pre-launch questionnaire so that the questionnaire can be resumed after a page refresh.
It remains until the questionnaire is completed, reset or the relevant browser/site data is deleted.
Map Preferences
map.savedFilters uses localStorage to remember discovery and map filter preferences.
It remains until removed by the Platform or the relevant browser/site data is deleted.
Daily Login Functionality
spopyou_xp_daily_login_day uses sessionStorage to prevent a daily-login reward from being applied multiple times within the same browser tab.
It is removed when the browser tab is closed.
5. Payment Technologies
5.1 Stripe
Spopyyou uses Stripe for eligible payment-related functionality.
Stripe.js is currently used in the Coin wallet purchase flow, while certain subscription, billing and payout processes may redirect users to Stripe-hosted pages.
Stripe-related technologies may include:
Cookie Purpose Approximate Duration
__stripe_mid Fraud prevention and device identification 1 year
__stripe_sid Fraud prevention and payment-session identification 30 minutes
m Fraud prevention on Stripe-hosted pages Up to 2 years
machine_identifier Fraud prevention/device identification Up to 2 years
private_machine_identifier Fraud prevention/device identification Up to 2 years
Stripe may use additional strictly necessary technologies on Stripe-hosted checkout, billing and Connect pages.
5.2 CCBill
Spopyyou may use CCBill for eligible restricted/18+ digital services and applicable wallet top-ups where supported by CCBill.
Customers using an eligible CCBill payment flow are redirected to a CCBill-hosted payment page.
Spopyyou does not currently load CCBill JavaScript directly on Spopyyou pages.
CCBill may use Cookies and Similar Technologies on its hosted payment pages for:
payment processing;
checkout session management;
security;
fraud prevention.
The exact Cookies and retention periods used on CCBill-hosted pages are controlled by CCBill.
Spopyyou does not use CCBill to process payments for in-person events or meetups where such processing is not supported by CCBill.
5.3 Temporary CCBill Transaction Storage
Where applicable, Spopyyou may temporarily use a sessionStorage entry associated with a CCBill transaction to enable the Platform to check the payment status after the user returns from checkout.
The information is retained until the browser tab is closed or the payment is completed, fails or expires.
6. Identity and Age Verification – Veriff
Spopyyou uses Veriff for identity and age verification.
The verification process currently opens on a Veriff-hosted page. Spopyyou does not currently embed the Veriff JavaScript SDK directly into Spopyyou pages.
Veriff may use its own Cookies and Similar Technologies for:
verification-session management;
identity and age verification;
security;
fraud prevention.
The duration of these technologies is determined by Veriff.
Veriff may also process identity documents, verification information and biometric-related information as part of the verification process. Further information about the processing of personal data is provided in the Spopyyou Privacy Policy.
7. Maps and Location Technologies
Spopyyou uses several technologies to provide maps and location functionality.
Leaflet is self-hosted and is used to display the Spopyyou discovery map. It does not itself set Cookies.
CARTO provides map imagery and map tiles. CARTO does not set a Spopyyou Cookie through this integration, although network information such as the user's IP address may be transmitted when map resources are requested.
Google Maps JavaScript API is used for location selection in certain event and venue management forms.
Google Places API supports address and location autocomplete.
Google may use its own Cookies or Similar Technologies when these services are used.
Spopyyou may also use the Browser Geolocation API where a user chooses to share their location. Browser geolocation itself does not require a Spopyyou Cookie and is subject to the user's browser/device permissions.
8. Push Notifications
Spopyyou uses a first-party service worker to support browser push notifications.
Where a user voluntarily enables notifications, a Web Push Subscription may be created through the relevant browser push infrastructure, which may involve providers such as Google, Mozilla or Apple.
Notifications may relate to:
messages;
matches;
events;
other relevant Platform activity.
Push functionality remains active until the user unsubscribes, revokes notification permission or removes the relevant browser/site data.
The Spopyyou service worker currently does not perform offline caching.
9. Real-Time Communications and Platform Infrastructure
Spopyyou uses Socket.io/WebSocket technology to provide functionality such as:
real-time chat;
typing indicators;
notification updates.
According to the current technical implementation, this does not require an additional Spopyyou Cookie.
Spopyyou also uses Amazon Web Services infrastructure, including Amazon S3, to deliver certain media such as profile photos, event images and message attachments. This integration does not independently place a Spopyyou Cookie.
Where applicable, Unsplash may provide fallback or placeholder images. Although no Spopyyou Cookie is set through this functionality, network information such as an IP address may be transmitted when external resources are requested.
Web fonts used by Spopyyou are currently self-hosted. Although the font files originate from Google Fonts, they are downloaded during the application build process and served directly by Spopyyou. The user's browser therefore does not contact Google Fonts when loading these fonts.
10. Analytics, Advertising and Marketing Technologies
Spopyyou currently does not use analytics, advertising or marketing tracking technologies.
In particular, the current Platform implementation does not include:
Google Analytics;
Google Tag Manager;
Meta/Facebook Pixel;
TikTok Pixel;
LinkedIn Insight Tag;
Hotjar;
PostHog;
Mixpanel;
session replay or recording tools;
advertising cookies;
retargeting cookies.
If Spopyyou introduces such technologies in the future, this Cookie Policy and, where required, the Cookie Consent mechanism will be updated accordingly.
11. Cookie Consent and User Choices
Where consent is required by applicable law, non-essential Cookies and Similar Technologies will only be activated after the user has provided the required consent.
Users may be given the ability to:
accept optional technologies;
reject non-essential technologies;
customize their preferences;
withdraw previously provided consent.
Essential technologies necessary to provide a service requested by the user, maintain security or operate essential Platform functionality may be used without consent where permitted by applicable law.
Browser permissions, including location and push-notification permissions, can also be managed through the user's browser or device settings.
12. Third-Party Services
Some Platform functions redirect users to or communicate with third-party services.
These providers may process information and use their own Cookies or Similar Technologies in accordance with their respective privacy and cookie policies.
Relevant providers currently include, depending on the functionality used:
Stripe, CCBill, Veriff, CARTO, Google Maps/Places and Amazon Web Services.
Spopyyou's server-side infrastructure also uses services including Supabase and Amazon Web Services, although the current server-side integrations do not independently place Spopyyou Cookies.
13. Managing Cookies and Similar Technologies
Users may manage Cookies through their browser settings and, where provided, through Spopyyou's Cookie Preferences.
Users may also:
delete stored Cookies;
clear localStorage and sessionStorage;
revoke location permission;
disable browser notifications;
manage other site permissions through their browser or device.
Disabling essential technologies may prevent certain Platform functionality from operating correctly.
14. Changes to this Cookie Policy
Spopyyou may update this Cookie Policy where necessary to reflect:
changes to Platform functionality;
introduction or removal of technologies;
changes to service providers;
changes in legal or regulatory requirements.
The current version will display its Last Updated date.
Where required by applicable law, Spopyyou will obtain renewed consent before materially changing the use of consent-based Cookies or Similar Technologies.
15. Contact Information
If you have questions regarding this Cookie Policy or Spopyyou's use of Cookies and Similar Technologies, please contact:
sebavision OÜ
Sepapaja tn 6
15551 Tallinn
Estonia
Privacy: privacy@spopyyou.com
Support: support@spopyyou.com
Website: spopyyou.com
---