Cookie Policy
Cookies and local storage at Moments Forever
Last updated: {{COOKIES_UPDATED}}. The German version („Cookie-Richtlinie“) is authoritative.
Controller: Nolix Digital GmbH, {{ADDRESS}}, {{POSTAL_CODE}} Wien, Austria, [email protected] (see Imprint). "Moments Forever" is a product of Nolix Digital GmbH.
This policy applies to
- the webshop at moments.memorial,
- the platform (memorial pages and user area) at app.moments.memorial, and
- the mobile app "Moments Forever" for iOS and Android.
It supplements our Privacy Policy.
1. Summary
We use only strictly necessary cookies and storage technologies. We do not use analytics, statistics, marketing or tracking cookies, advertising networks, Google Analytics, social-media plugins or fonts loaded from external servers. That is why we show no cookie banner: under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) no consent is required for strictly necessary technologies.
Should we ever introduce technologies that require consent, we will ask for it in advance through a consent dialog and update this policy.
2. Terms
- Cookies are small text files that a website places in your browser and reads again on your next visit.
- Local Storage and Session Storage are browser storage areas in which a website can keep data. Local Storage persists until deleted; Session Storage is cleared when the tab is closed. Unlike cookies, neither is sent to the server automatically.
- In the app, comparable data is kept in the device's protected storage.
3. Legal basis
Storing information on your device and accessing it is governed by § 165(3) TKG 2021. Strictly necessary storage, without which the service you explicitly requested cannot be provided, is permitted without consent. The subsequent processing of personal data is based on Art. 6(1)(b) GDPR (contract / use of the service) and Art. 6(1)(f) GDPR (security and operation of our systems).
4. Webshop (moments.memorial)
| Name | Type | Purpose | Lifetime | Provider |
|---|---|---|---|---|
NEXT_LOCALE | Cookie | Remembers the chosen language (DE, EN, FR, IT, ES, SR) | Session (until the browser is closed) | Us |
checkout_cart | Local Storage | Confirmed cart (cart ID, products, prices, promo code) for the checkout process | Until the cart expires (24 hours) or the order is completed | Us |
selected_subscription | Local Storage | Pre-selected subscription plan | Until the order is completed | Us |
selected_products | Local Storage | Pre-selected add-on products (e.g. Soul Star plaque) | Until the order is completed | Us |
referral_code | Local Storage | Remembers a referral/partner code from the link you used to open the shop so it can be attributed to your order. On our server this only increments a visit counter per code, without any data about you. | Until the order is completed or you clear your browser storage | Us |
The Montserrat font is served from our own server; no connection to Google servers is made.
Payment via Stripe: When you click the order button you are redirected to a payment page
operated by Stripe (checkout.stripe.com). There, Stripe Payments Europe, Ltd. (Ireland) sets
its own cookies, in particular __stripe_mid (fraud detection, 1 year) and __stripe_sid
(fraud detection, 30 minutes). They are necessary for secure payment processing and are subject
to Stripe's cookie policy: https://stripe.com/legal/cookies-policy (opens in a new tab). No Stripe cookies are set
on our own domain.
5. Platform (app.moments.memorial)
The platform sets no cookies. It uses the following browser storage:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
auth-token | Local Storage | Access token that keeps you signed in (only after login) | Until logout; the token itself expires after 24 hours |
refresh-token | Local Storage | Renews the access token without a new login (only after login) | Until logout; the token itself expires after 7 days |
moments_device_signature | Local Storage | Randomly generated device identifier that binds your login session to this device (session security, detection of account takeover, abuse prevention) | Until you clear your browser storage |
i18nextLng | Local Storage | Chosen language | Unlimited |
moments-theme | Local Storage | Chosen colour scheme (light/dark) | Unlimited |
moments-cart | Local Storage | Cart in the platform shop (renewal, add-on products) | Until the order is completed or the cart is emptied |
onboarding:lastStep:<id>, onboarding:hideChecklist:<id> | Local Storage | Progress in the memorial setup wizard (owners only) | Unlimited |
lifeStoryVisibilityAsked:<id> | Local Storage | Remembers that the life-story visibility notice has already been shown | Unlimited |
tribute-cooldown-<id> | Local Storage | Prevents the same candle/flower from being sent several times in a row by accident | Timestamp, unlimited |
onboarding:snoozed:<id> | Session Storage | Suppresses the automatic redirect into the setup wizard | Until the tab is closed |
slideshow-seen | Session Storage | Remembers which slideshow has already played in this session | Until the tab is closed |
Third-party content loaded when a memorial page is displayed:
- Photos and videos are delivered from servers of our processor bunny.net (BunnyWay d.o.o.,
Slovenia; domains
*.b-cdn.netor our CDN hostname). For technical reasons bunny.net receives your IP address. No cookies are set and no profiles are built. Without this delivery, images and videos could not be shown. - Video trimming before upload: If you trim a video in the browser before uploading it, the browser loads the required software component (ffmpeg) once from the content-delivery network unpkg.com (Cloudflare, Inc., USA), which receives your IP address in the process. No cookies are set.
6. Mobile app
The app uses no cookies and no analytics or advertising SDKs. It stores on the device:
| Data | Location | Purpose | Duration |
|---|---|---|---|
| Access and refresh tokens | Protected OS storage (Keychain / Keystore) | Stay signed in | Until logout |
Device identifier (moments_device_signature) | App preferences | Session security, abuse prevention | Until the app is uninstalled |
| Colour scheme | App preferences | Display | Until uninstalled |
| Image/video cache | App sandbox | Faster display of media already loaded | Cleared by the OS or when app data is deleted |
With every request to our servers the app also transmits the device type (iOS/Android), OS version and device model (e.g. "iPhone 15") as a technical identifier. Details: Privacy Policy, section "Mobile app".
7. Internal administration area
Our backoffice (administration interface for staff) is not publicly accessible and uses a
session cookie (moments-forever-session), a cross-site-request-forgery protection cookie
(XSRF-TOKEN) and an optional "remember me" cookie. These only affect employees of
Nolix Digital GmbH.
8. How to manage cookies and storage
- Browser: You can view and delete cookies and site data at any time in your browser settings (e.g. Chrome: Settings → Privacy and security → Site data; Firefox: Settings → Privacy & Security → Cookies and Site Data; Safari: Settings → Privacy → Manage Website Data). If you clear the platform's storage you will be signed out and your language/theme settings reset.
- Logging out deletes the access tokens from the browser or the app.
- App: Through the system settings (iOS: delete the app; Android: Apps → Moments Forever → Storage → Clear data) you remove all locally stored data.
Blocking strictly necessary storage may prevent login, cart and checkout from working.
9. Changes
We update this policy whenever the technologies we use change. The current version is always available at moments.memorial/cookies. In case of significant changes (e.g. introduction of analytics tools) we will inform you on your next visit.
10. Contact
Questions about this policy: [email protected].