Cookie Policy
Last updated:
Draft — to be reviewed by a lawyer before launch. This policy is not in force yet.
Cookies are small files a website saves in your browser. Similar tools, like local storage, work the same way. This policy lists the ones WhenBy uses on our website, on booking pages and in the web app. Our Privacy Policy explains the rest.
1. The short version
- Our pages work without any cookie you have to accept.
- We use analytics cookies from Google Analytics 4 only if you click Accept analytics. Until then, Google's script isn't even loaded.
- No advertising cookies, no tracking across other sites.
- You can change your choice at any time with Cookie settings at the bottom of every page.
2. Strictly necessary
These make the site work or remember your choice. They don't need consent.
| Name | What it does | Type | How long |
|---|---|---|---|
cookie_consent | Remembers whether you accepted or rejected analytics, so we don't ask on every page. | First-party cookie | 6 months |
sb-<project>-auth-token | Keeps you signed in to the web app. Only set when you sign in. | Local storage | Until you sign out |
flutter.* | Your settings in the web app, such as language. | Local storage | Until you clear it |
3. Analytics (only with your consent)
If you accept, Google Analytics 4 sets these cookies on our domain, to count visits and see which pages are used. Google receives your IP address but doesn't store it. We turn off Google signals and advertising features.
| Name | What it does | Provider | How long |
|---|---|---|---|
_ga | Tells visits from different browsers apart, with a random number. | Google Analytics (Google Ireland Limited) | 13 months |
_ga_<id> | Keeps the state of your visit (<id> is our measurement ID). | Google Analytics (Google Ireland Limited) | 13 months |
We set both cookies to expire after 13 months, and coming back doesn't extend them. If you later reject analytics, we delete them.
4. Changing your choice
- Use Cookie settings at the bottom of any page, or the button below on this page.
- You can also delete cookies in your browser's settings. We will then ask again.
- If JavaScript is turned off, the banner doesn't appear and no analytics run.
5. Other sites
Booking pages can link to maps, WhatsApp or Instagram. Those sites have their own cookie policies, which apply once you follow the link.
6. Contact
Questions: [CONTACT EMAIL].