← Back to home

Cookie Policy

Last updated:

1. What Are Cookies

Cookies are small text files stored on your browser or device when you visit a website. They allow the site to recognize your device, remember your preferences over time, and provide essential functionality as well as analytics and security features. In this policy we use the term "cookies" generically to also include similar technologies such as localStorage, sessionStorage, and pixel tags where applicable.

2. How We Use Cookies

We use cookies only for the following strictly necessary, functional, and security purposes:

  • Session / Authentication cookies (Strictly Necessary): keep you logged in, preserve multi-step form state across page loads (e.g. during a share reservation flow), and protect your session from tampering.
  • CSRF tokens (Strictly Necessary): embedded in forms to prevent cross-site request forgery attacks on every POST action, including login, password reset, locale change, contact form, reservation, and marketplace submissions.
  • Appearance preference (Functional): remember whether you chose light, dark, or system appearance so it persists across visits.
  • Locale / Direction preference (Functional): remember your chosen language and associated text-direction (LTR or RTL) across pages and sessions.
  • Security and Abuse-prevention data (Strictly Necessary): rate-limiting signals, throttling tokens, and identifiers used to stop automated abuse of login, registration, and contact endpoints.

3. Cookies We Deploy

  • laravel_session — Session ID cookie (HttpOnly, Secure, SameSite=Lax). Duration: session-only by default, extended when "Remember me" is used at login.
  • XSRF-TOKEN — CSRF token for client-side readability by scripts.
  • appearance — Stores your appearance choice: light, dark, or system. Duration: long-lived.
  • locale / framework locale session state — stores your chosen display language for non-logged-in visitors and authenticated accounts without a saved preference.

We do not currently use cookies for third-party advertising, cross-site tracking, or marketing analytics.

4. Managing Cookies

  • Most browsers let you block, delete, or restrict cookies through their settings. Blocking cookies may break essential functionality on the platform: you will not be able to stay logged in, submit forms, or complete share reservations.
  • Language and appearance preferences can be changed at any time from the homepage (locale switcher) or from Settings → Appearance when logged in. Updates overwrite the previously stored preference.
  • Because we do not deploy tracking cookies, we do not currently provide a "Consent Manager" banner. If this changes in the future, you will be presented with a granular consent choice on your next visit.

5. Third-Party Domains

At the current stage, the Platform embeds no third-party trackers, analytics scripts, social-media widgets, or advertising networks that would set cross-site cookies. If we integrate any in the future, we will update this policy and present you with an appropriate consent interface where required by applicable law.

6. Logs and IP Addresses

For security and abuse prevention, our web servers also record standard request metadata — IP address, request timestamp, user agent string, and requested URL — in server logs. These are not cookies; they are retained for a limited period to investigate abuse, incidents, and audit events, and are then deleted or anonymized.

7. Changes

Any material change to the types of cookies we use, their purpose, or the introduction of tracking cookies will be reflected on this page with a new "Last updated" date and, where required by law, a fresh consent prompt on your next visit.