1. What cookies are
Cookies are small text files that websites store in your browser to remember information about your visit: language, logged-in session, preferences and similar settings. They are also used to measure site usage and improve the experience.
Together with cookies, we use similar technologies such as localStorage, sessionStorage and tracking pixels, which are governed by this same policy.
2. Types of cookies we use
We classify cookies into three categories:
- Technical (essential): required for the website to work: they keep the session active, protect against CSRF attacks, apply security rate limiting and record affiliate attribution when you land on LEBBO via a referral link. They are exempt from consent under Article 22.2 of the Spanish LSSI (service expressly requested by the user).
- Analytics: help us understand how the service is used and detect errors. They are enabled only if you give consent.
- Marketing / advertising: used to measure advertising campaign performance (Google Ads). Enabled only if you give consent: until you do, no Google tag is loaded and no data is sent to Google's servers.
3. Detailed list
| Cookie / storage | Category | Purpose | Duration |
|---|---|---|---|
sb-ewfhtnmvkiadketvsweg-auth-tokensb-ewfhtnmvkiadketvsweg-auth-token.<n> | Technical | Authentication session (Supabase Auth). It may be split into multiple cookies with a numeric suffix when the value exceeds the maximum size. | Up to 400 days, sign-out or session expiry |
lebbo_consent | Technical | Stores your cookie preferences in localStorage | Until you clear local storage or the consent version is invalidated |
lebbo_affiliate | Technical (affiliate attribution) | Records affiliate program attribution when you reach LEBBO via a referral link. First-party cookie signed with HMAC-SHA256 containing only an opaque identifier. Necessary for the affiliate program to operate and only set when you voluntarily click a /r/<code> link; treated as a service expressly requested by the user under Article 22.2 of the Spanish LSSI. | 30 days |
lebbo_acquisition | Technical (booking source) | Keeps a first-touch record of whether the visit started in the LEBBO marketplace or through a company's own link/QR. For the direct channel it contains signed, opaque HttpOnly evidence; the source is revalidated and frozen when the booking is created. It is used only to apply the correct contractual commission and prevent tampering. | 30 days |
__stripe_mid__stripe_sid | Technical (payment) | Payment fraud prevention, managed by Stripe during checkout | 1 year / session |
sentry-tracebaggage | Analytics | Error and performance tracing (Sentry). Anonymized data. | Session |
_ga_ga_NYLYD87H2J | Analytics | Google Analytics 4: distinguishes users and sessions to measure aggregate site usage. Only set if you accept the analytics category (Consent Mode v2). | 2 years |
4. Third-party cookies
Some services we use may set their own cookies:
- Stripe — payments. See its cookie policy.
- Supabase — session and data. See its privacy policy.
- Vercel — hosting and aggregate analytics. More information.
- Sentry — error monitoring. More information.
- Google Analytics — usage analytics, only with your consent. See its privacy policy.
5. How to manage cookies
You can manage your consent at any time from the button available on this page and in the website footer.
In addition, all browsers allow you to block, limit or delete cookies from their privacy settings:
6. Consequences of rejecting them
You can reject non-essential cookies without affecting basic browsing. Blocking technical cookies may prevent sign-in, the booking cart from working correctly or payment anti-fraud protection.
The affiliate attribution cookie (lebbo_affiliate) is only set when you voluntarily click a /r/<code> link and is required for the affiliate program to operate. If you don't want to be attributed to any affiliate, simply avoid those referral links: the rest of the site works without it.
7. Updates
This policy may be updated to reflect changes in the technologies we use or in applicable law. The last review date appears at the beginning of the document. For any questions, you can contact us at privacidad@lebbo.es.