Cookies & similar technologies

Last updated: July 18, 2026

This policy explains how Visby uses cookies and similar technologies on www.visbytravel.com and related web surfaces. The Visby mobile app relies primarily on OS permissions and secure local storage, not browser cookies. See also our Privacy Policy.

1. Categories

• Essential: required to run the site (security, load balancing, hotel partner login / OAuth session cookies via our auth provider). These cannot be switched off if you use those features.
• Analytics (optional): first-party page-view events that help us understand which pages are useful. We use an ephemeral session id in sessionStorage (not a long-lived advertising cookie). No advertising IDs and no cross-site tracking pixels.

2. What we store

• Analytics consent — localStorage key remembering Accept / Reject for analytics.
• Analytics session id — short-lived sessionStorage id for the browser tab when analytics is allowed.
• Auth cookies — set by Supabase Auth for hotel partner sign-in (PKCE / session), essential for that flow.
• UI preferences — e.g. dismissing a waitlist or mobile prompt (not used for advertising).

3. Your choices

On first visit (and when required by your region), we ask whether to allow analytics. You can Accept or Reject. You can change your mind anytime by clearing site data for visbytravel.com or contacting us. Essential cookies remain active for login and core functionality.

4. Third parties

We do not load Google Analytics, Meta Pixel, or similar advertising tags on the marketing site. Service providers that power hosting and auth may set their own essential cookies — see Subprocessors.

5. Contact

Questions: hello@visbytravel.com · Privacy request form