Cookie Policy
01Overview
Cookies are small text files a website stores on your device; we also use similar browser storage (localStorage) for some features. This policy lists everything BookMySpot stores on your device, what it's for, and how you control it. It supplements our Privacy Policy.
We keep it minimal: cookies that are strictly necessary to run the platform, a few preference cookies, and - only if you opt in - analytics. We do not use advertising or cross-site tracking cookies, and we never sell cookie data.
02How consent works
When you first visit, a banner asks whether we may use analytics cookies. Nothing non-essential is stored until you choose, and rejecting is exactly one click, the same as accepting. Your choice is remembered on your device.
You can change or withdraw your consent at any time using the Cookie preferences link in the footer. Withdrawing consent stops analytics immediately and clears its identifiers.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a decision to reject non-essential cookies automatically and won't show you the banner.
03Strictly necessary
These make the platform work - signing in, staying signed in, protecting your session and preventing payment fraud. They can't be switched off, and no consent is required for them.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| better-auth.session_token | BookMySpot | Keeps you signed in to your account. | 7 days |
| better-auth.* (state, csrf) | BookMySpot | Protects sign-in flows against cross-site request forgery. | Session |
| __stripe_mid / __stripe_sid | Stripe | Fraud prevention during payment. Stripe's script loads only on checkout pages, as part of the payment you've asked us to process. | 1 year / 30 minutes |
| bms.cookie-consent (localStorage) | BookMySpot | Records the cookie choices you've made. | Until cleared |
04Preferences
These remember choices you make so the site behaves the way you left it. They store no identifiers and are not used for tracking.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| i18next | BookMySpot | Remembers your language. | 1 year |
| sidebar_state | BookMySpot | Remembers whether the dashboard sidebar is open. | 7 days |
| theme (localStorage) | BookMySpot | Remembers light or dark mode. | Until cleared |
05Analytics (only with your consent)
We use PostHog, hosted in the European Union, to understand how the product is used so we can improve it. It runs only after you opt in - if you don't, nothing below is stored and no analytics data is collected.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog (cookie + localStorage) | PostHog (EU) | Distinguishes visitors and remembers session context for product analytics. | 1 year |
Analytics data is processed on our behalf under a data-processing agreement and is not shared with advertisers or ad networks.
06Error monitoring
We use Sentry to capture crashes and errors so we can fix them. Sentry does not set cookies on your device; error reports are kept to what's needed to diagnose the problem. We rely on our legitimate interest in keeping the platform secure and working for this processing - see the Privacy Policy for details and your rights.
07Browser controls
You can also block or delete cookies in your browser settings. Blocking strictly-necessary cookies will break sign-in and checkout. Deleting cookies also deletes your stored consent choice, so we'll ask again on your next visit.
08Changes
If we add or change cookies, we'll update this page and, where the change needs new consent, ask you again through the banner. The effective date above always reflects the latest version.
09Contact
Questions about cookies or this policy: support@bookmy.spot. BookMySpot is operated by XBIT Corp Pty Ltd (ABN 20 682 428 128), South Australia, Australia.