Cookie policy

A cookie is a small text file a website asks your browser to store and send back on later requests. Similar technologies — local storage, session storage and IndexedDB — keep data in the browser without sending it back automatically. This policy covers all of them.

These are required for the service to work and cannot be switched off. They are set on the basis of our legitimate interest in providing a secure service, and no consent is required for them.

• better-auth.session_token — identifies your signed-in session across the product and your organisation’s booking pages. Expires when the session does, or when you sign out.
• CSRF and callback cookies set during sign-in — short-lived values used to complete an email, magic link or social sign-in safely. Removed once sign-in finishes.

These remember a choice you made so the product does not ask again. They hold no identifier and are not shared.

• NEXT_LOCALE — the language you chose, so pages render in it on your next visit. One year.
• DISPLAY_CURRENCY — the currency you asked to see prices in. One year.
• bookify.theme (browser local storage) — light, dark or system appearance.
• A cached copy of recently viewed bookings (IndexedDB) — so the app opens instantly and works briefly offline. Cleared on sign-out and after 24 hours.

We use no advertising cookies, no cross-site trackers and no third-party analytics that profile you. Aggregate usage measurement is done from our own server logs, which are kept for 90 days and are not linked to a cookie you can be recognised by across other websites.

Pages that take a card payment load Stripe, which sets its own cookies for fraud prevention. If your organisation connects Google Calendar or Microsoft 365, those sign-in flows happen on the provider’s own pages under their own cookie policies. We set no cookies on your behalf on other websites.

You can delete or block cookies in your browser settings, and clear local storage and IndexedDB the same way. Blocking the strictly necessary cookies will stop you signing in; blocking the preference cookies simply means the product forgets your language, currency and appearance choice each visit.

If we add or remove a cookie, this page changes with it and the date at the top is updated. Any new non-essential technology would be introduced with a proper consent mechanism, not silently.