Cookie Policy — Version history

Every published version, with a line-by-line comparison between any two.

Compare fromCompare to

Changes from version 1 to version 2: +4 −3 lines

## 1. Overview {#overview}

This cookie policy explains how the Lataamo event platform ("we", "us", "our"), operated by Lataamo Group Oy, uses cookies and similar browser storage technologies.

This cookie policy explains how Lataamo's event application ("we", "us", "our"), operated by Lataamo Group Oy, uses cookies and similar browser storage technologies.

The short version: **we use only what is strictly necessary to operate the service.** There are no advertising cookies, no analytics cookies, no third-party tracking, no ad pixels, and no cross-site tracking of any kind.

The short version: **we use only what is strictly necessary to operate the service.** Everything we deliberately do not use is listed in [Section 6](#what-we-do-not-use).

Because we only use essential cookies, we are not required to ask for cookie consent. The cookie banner you may see on your first visit is there for transparency — it informs you, it does not ask you to accept tracking, because there is none.

For how we handle your personal data more broadly, see our [Privacy Policy](/legal/privacy-policy).

## 2. What Are Cookies? {#what-are-cookies}

Cookies are small text files that a website stores in your browser. Related technologies — local storage, IndexedDB, and service worker caches — store data in your browser in a similar way. This policy covers all of them.

## 3. Cookies We Set {#cookies-we-set}

| --- | --- | --- | --- |

| `linkedin_oauth_state` | Protects sign-in with LinkedIn against cross-site request forgery during the login redirect | 10 minutes (deleted when sign-in completes) | Essential |

| `linkedin_oauth_mode` | Set only when you link LinkedIn to an existing account, so the flow completes as a link rather than a new sign-in | 10 minutes (deleted when sign-in completes) | Essential |

| `linkedin_custom_token` | Completes sign-in with LinkedIn — a one-time, server-only handoff token used during the login redirect | 5 minutes (deleted immediately after use) | Essential |

The LinkedIn cookies are only set if you choose to sign in with (or link) LinkedIn, are not readable by scripts (httpOnly), and are deleted as soon as the sign-in flow completes.

## 4. Local Storage and Similar Technologies {#local-storage}

We also use your browser's built-in storage for functional purposes:

- **Sign-in state** — your authentication session is kept in secure browser storage (IndexedDB) so you stay signed in between visits. It is removed when you sign out.

- **Preferences** — your theme choice, language preference for voice features, and dismissed notices (such as this cookie banner or install prompts) are remembered locally.

- **Offline support** — the app can be installed on your device and caches assets with a service worker so it loads fast and works with a poor connection.

- **Push notifications** — if you enable notifications, a device identifier is stored locally so notifications reach the right device.

- **Error diagnostics** — our error monitoring keeps a short-lived, tab-scoped session marker in browser storage so that if something breaks, a technical report of what went wrong can be captured. All text and inputs in such reports are masked and media is blocked — no personal content is recorded.

- **Functional caches** — short-lived, event-scoped data (such as pending registration context) may be cached locally to make navigation faster.

All of this storage is first-party, serves only the operation of the platform, and is never used to track you across other websites or to build advertising profiles.

All of this storage is first-party and serves only the operation of the application.

## 5. Embedded Content {#embedded-content}

Event sessions may include live streams or videos served by third-party players: Cloudflare Stream, YouTube (loaded in privacy-enhanced mode via `youtube-nocookie.com`), and Vimeo (loaded with Do-Not-Track enabled). When you watch embedded content, the player provider may set strictly-necessary cookies of its own inside the playback frame (for example, for security or bot protection). We deliberately configure these embeds in their privacy-preserving modes, and none of them is used for ad targeting on our platform.

## 6. What We Do Not Use {#what-we-do-not-use}

- No analytics or measurement cookies

- No marketing or advertising cookies

- No third-party tracking scripts, ad pixels, or retargeting technologies

- No cross-site tracking or fingerprinting

- Nothing we store is used to track you across other websites or to build advertising profiles

## 7. Managing Cookies and Stored Data {#managing}

You can delete or block cookies and site data at any time through your browser settings. Because everything we store is essential or functional, doing so has practical consequences: you will be signed out, your event context and preferences will reset, and offline support will be unavailable until the app re-caches.

## 8. Changes to This Policy {#changes}

This policy is published with a full version history. Any change is released as a new version with its own effective date and a plain-language change summary — see the [version history](/legal/cookie-policy/history) and the [combined changelog](/legal/changelog).

**Questions?** Contact us at [info@lataamo.fi](mailto:info@lataamo.fi)

All versions

Version 2
Effective July 13, 2026
Consolidated duplicate no-tracking statements into one section and unified naming; no change to the cookies we set or how they are used.
Version 1
Effective July 2, 2026
Initial published version — documents the platform's essential-cookies-only posture.