The short version
We only use strictly necessary cookies — the ones that keep you signed in and your payments secure. No advertising cookies, no cross-site or social-media trackers. Our traffic analytics are cookieless and store nothing on your device. That is why you don’t see a cookie banner here: the law only requires consent for the kind of cookies and device storage we don’t use.
1. What cookies are
Cookies are small text files that a website stores in your browser. They let the site remember things between pages and visits — for example, that you are signed in.
2. The cookies we use
Spot a group sets cookies only when you sign in or pay, and only to keep the service working:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
sb-* | Authentication cookies set by Supabase, our sign-in provider. They keep you signed in as you move around the site. | Up to 1 year, or until you sign out | First-party, strictly necessary |
__stripe_mid, __stripe_sid | Set by Stripe, our payment processor, when you pay. They are used for fraud prevention and to keep payments secure. | 1 year / 30 minutes | Stripe, strictly necessary |
If you just browse without signing in or booking, spot a group sets no cookies at all.
3. Analytics — without cookies
To understand how many people visit and which pages they read, we use Vercel Web Analytics, a privacy-friendly service provided by our hosting platform. It is deliberately cookieless: it sets no cookies, uses no localStorage, and does not fingerprint your browser or track you across other sites. It counts anonymous, aggregated page views only; it never builds a profile of you. Because it stores and reads nothing on your device, it needs no consent under the cookie rules — but we tell you about it here for transparency. How the underlying visit data is handled is covered in our privacy policy.
4. What we don’t use
No advertising or retargeting cookies, no social-media trackers, no cross-site tracking of any kind. If we ever introduce cookies or device storage that require your consent, we will ask for it first and update this page before anything changes.
5. Managing cookies
You can delete or block cookies at any time from your browser settings (look for “Cookies” or “Site data” in the privacy settings of Chrome, Safari, Firefox or Edge). Keep in mind that deleting our authentication cookies signs you out, and blocking them means you cannot stay signed in.
6. Questions
Anything unclear? Write to us through the contact page — a human answers within one business day. For how we handle personal data more broadly, see our privacy policy.