The cookies we use
Spitio uses as few cookies as it can. The necessary ones keep the site working and are always on. Analytics and marketing cookies are used only if you allow them, each with its own switch.
Necessary · always on
| Cookie | Set by | What for | Lasts |
|---|---|---|---|
| sb-…-auth-token | Spitio (Supabase, our sign-in service) | Keeps you signed in. Only set when you sign in. | Up to 400 days, or until you sign out |
| spitio_consent | Spitio | Remembers your cookie choice, so we don't ask again. | 12 months |
| spitio_help_for | Spitio | Remembers whether the help centre should open on guest or host answers. | 12 months |
| spitio_preview | Spitio | Only before launch: lets people with a preview link see the site. | 90 days |
| __stripe_mid, __stripe_sid | Stripe, our payment provider | Fraud prevention on the pages where you pay by card. | 1 year and 30 minutes |
Our own visit counter uses no cookies at all: it counts page views with an anonymous code that changes every day, and never stores your IP address. It runs whatever you choose here.
Analytics · only with your consent
| Cookie | Set by | What for | Lasts |
|---|---|---|---|
| _ga | Google Analytics | Tells visits apart, so we can count how Spitio is used. | 2 years |
| _ga_<ID> | Google Analytics | Keeps the state of your current visit. | 2 years |
Google Analytics loads only after you choose Accept all, or turn on Analytics in the settings. We send it no names, e-mail addresses, phone numbers, booking codes or account ids, and we remove private parts of page addresses before they are sent. Google Signals and ad personalisation stay off unless you also turn on Marketing.
Marketing · only with your consent
Meta (Facebook/Instagram) and Google Ads, to show you Spitio ads and measure them.
| Cookie | Set by | What for | Lasts |
|---|---|---|---|
| _fbp | Meta (Facebook / Instagram) | Recognises this browser, so Meta can show Spitio ads to people who visited and measure what they did. | 90 days |
| _fbc | Meta (Facebook / Instagram) | Remembers that you arrived from a Spitio ad on Facebook or Instagram. Only set after such a click. | 90 days |
| fr | Meta, on facebook.com | Meta's own advertising cookie, when you are signed in to Facebook or Instagram in this browser. | 90 days |
| _gcl_au | Google Ads (through Google Analytics) | Links visits to Spitio ads on Google, to measure them. | 90 days |
| _gcl_aw | Google Ads (through Google Analytics) | Remembers that you arrived from a Spitio ad on Google. Only set after such a click. | 90 days |
| IDE | Google Ads, on doubleclick.net | Google's advertising cookie: shows Spitio ads to past visitors and measures them. | 13 months |
The Meta Pixel loads only after you choose Accept all, or turn on Marketing in the settings, and never on pages with your booking or account details. It is told which homes you looked at, searches (place, dates, number of guests) and when you book, sign up, list a home or write to us, with amounts and home ids only. For those last few, our server also tells Meta directly (Meta's Conversions API), with your e-mail address and phone number only in scrambled form (SHA-256 hashed), your IP address and browser, and the two Meta cookies above. Never your name, address, booking code or messages.
Google Ads works through Google Analytics, which Marketing lets store advertising cookies and use Google Signals. Turning Marketing off stops all of this at once, tells Meta to stop, and deletes the Meta and Google Ads cookies we set.
Changing your choice
Your choice is kept for 12 months, then we ask again. You can change it any time with Cookie settings at the bottom of every page. When you turn Analytics or Marketing off, the cookies that belong to it on spitio.com are deleted. Cookies on facebook.com or doubleclick.net can only be deleted there, or in your browser's settings.
Questions: info@spitio.com or Contact.