1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember who you are, what you prefer, and how you use the site - so you get a faster, more personalised experience.
Beyond cookies, we also use similar technologies such as local storage tokens (for authentication) and session storage. This policy covers all such technologies collectively.
2. Types of Cookies We Use
Essential for the platform to function. These include authentication tokens (JWT), session management, and CSRF protection. Without these, you cannot sign in, make bookings, or use secure features. These cannot be disabled.
Remember your preferences and choices to provide a better experience. Examples: preferred currency, language setting, remember-me login, and recently viewed properties. If disabled, you may need to reset preferences each visit.
Help us understand how visitors use the platform so we can improve it. We use Vercel Analytics which collects anonymised, aggregated data - no personally identifiable information is included. If disabled, we lose the ability to measure and improve performance.
Used to show you relevant travel offers and promotions on other websites. If you accept these, we and our advertising partners may personalise ads based on your browsing behaviour. If disabled, you may still see ads but they will be less relevant.
3. Specific Cookies We Set
| Cookie / Key | Purpose | Duration | Type |
|---|---|---|---|
| auth-storage | Stores your JWT access/refresh tokens for session management | 7 days | Necessary |
| cookiePreferences | Saves your cookie consent choices | 12 months | Necessary |
| preferredCurrency | Remembers your selected display currency | 12 months | Functional |
| preferredLanguage | Remembers your language selection | 12 months | Functional |
| __vercel_speed_insights | Anonymised performance data (Vercel Analytics) | Session | Analytics |
| _ga | Google Analytics visitor identifier (if marketing accepted) | 2 years | Marketing |
4. Third-Party Cookies
Some cookies are placed by third-party services we use. We have no direct control over these cookies. The relevant third parties have their own privacy policies:
- Google (Sign-In): Used during OAuth sign-in flow only. See Google Privacy Policy.
- Stripe / PesaPal / M-Pesa: Payment processing iframes may set session cookies during checkout. These are strictly necessary for payment security.
- Vercel Analytics: Anonymised, privacy-first analytics. No personal data is transmitted.
- Cloudinary: Media delivery for property images. May set CDN performance cookies.
5. Your Cookie Preferences
Use the controls below to manage your non-essential cookie preferences. Your choices are saved in your browser and apply to this device only. You can change them at any time.
Strictly Necessary
Required for sign-in and bookings
Functional
Preferences, currency, language
Analytics
Anonymised usage data
Marketing
Personalised advertising
6. Managing Cookies in Your Browser
You can control or delete cookies directly through your browser settings. Here is how to manage cookies in major browsers:
Note: Disabling strictly necessary cookies (such as authentication tokens) will prevent you from signing in and using core platform features.
7. Changes to This Policy
We may update this Cookies Policy to reflect changes in technology, legislation, or our practices. We will notify you of significant changes via email or a banner on the platform. We will also re-request your consent where required.
8. Contact Us
If you have questions about our use of cookies or this policy, please contact us:
Email: support@luzoratravel.com
Address: Westlands Business Park, Nairobi, Kenya