1. What cookies are
Cookies are small text files that websites store in your browser to remember information about your visit: language, logged-in session, preferences and similar settings. They are also used to measure site usage and improve the experience.
Together with cookies, we use similar technologies such as localStorage, sessionStorage and tracking pixels, which are governed by this same policy.
2. Types of cookies we use
We classify cookies into three categories:
- Technical (essential): required for the website to work: they keep the session active, protect against CSRF attacks, apply security rate limiting and record affiliate attribution when you land on LEBBO via a referral link. They are exempt from consent under Article 22.2 of the Spanish LSSI (service expressly requested by the user).
- Analytics: help us understand how the service is used and detect errors. They are enabled only if you give consent.
- Marketing / advertising: used to measure analytics and advertising campaign performance (Google Analytics / Google Ads). Enabled only if you give consent; without it, tags operate in limited mode under Google's Consent Mode v2.
3. Detailed list
| Cookie / storage | Category | Purpose | Duration |
|---|---|---|---|
sb-ewfhtnmvkiadketvsweg-auth-tokensb-ewfhtnmvkiadketvsweg-auth-token.<n> | Technical | Authentication session (Supabase Auth). It may be split into multiple cookies with a numeric suffix when the value exceeds the maximum size. | Up to 400 days, sign-out or session expiry |
lebbo_consent | Technical | Stores your cookie preferences in localStorage | Until you clear local storage or the consent version is invalidated |
lebbo_affiliate | Technical (affiliate attribution) | Records affiliate program attribution when you reach LEBBO via a referral link. First-party cookie signed with HMAC-SHA256 containing only an opaque identifier. Necessary for the affiliate program to operate and only set when you voluntarily click a /r/<code> link; treated as a service expressly requested by the user under Article 22.2 of the Spanish LSSI. | 30 days |
__stripe_mid__stripe_sid | Technical (payment) | Payment fraud prevention, managed by Stripe during checkout | 1 year / session |
sentry-tracebaggage | Analytics | Error and performance tracing (Sentry). Anonymized data. | Session |
_ga_ga_NYLYD87H2J | Analytics | Google Analytics 4: distinguishes users and sessions to measure aggregate site usage. Only set if you accept the analytics category (Consent Mode v2). | 2 years |
4. Third-party cookies
Some services we use may set their own cookies:
- Stripe — payments. See its cookie policy.
- Supabase — session and data. See its privacy policy.
- Vercel — hosting and aggregate analytics. More information.
- Sentry — error monitoring. More information.
- Google Analytics — usage analytics, only with your consent. See its privacy policy.
5. How to manage cookies
You can manage your consent at any time from the button available on this page and in the website footer.
In addition, all browsers allow you to block, limit or delete cookies from their privacy settings:
6. Consequences of rejecting them
You can reject non-essential cookies without affecting basic browsing. Blocking technical cookies may prevent sign-in, the booking cart from working correctly or payment anti-fraud protection.
The affiliate attribution cookie (lebbo_affiliate) is only set when you voluntarily click a /r/<code> link and is required for the affiliate program to operate. If you don't want to be attributed to any affiliate, simply avoid those referral links: the rest of the site works without it.
7. Updates
This policy may be updated to reflect changes in the technologies we use or in applicable law. The last review date appears at the beginning of the document. For any questions, you can contact us at privacidad@lebbo.es.