Cookie Policy
Effective Date: December 2, 2025 • Last Updated: December 2, 2025
1. Introduction
This Cookie Policy explains how HostHero.io ("HostHero," "we," "us," or "our") uses cookies and similar tracking technologies when you visit our website and use our services. This policy should be read alongside our Privacy Policy and Terms of Service.
By using our Service, you consent to the use of cookies in accordance with this policy. You can manage your cookie preferences as described in Section 6.
3. How We Use Cookies
HostHero uses cookies for the following purposes:
3.1 Essential Cookies (Strictly Necessary)
These cookies are required for the Service to function and cannot be disabled. They enable core functionality such as security, authentication, and session management.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
| sb-access-token | Authentication token for logged-in hosts | Session | Supabase |
| sb-refresh-token | Refresh token for maintaining authentication | 7 days | Supabase |
| guest_session | Guest chat session identifier | 24 hours | HostHero |
| csrf_token | Cross-site request forgery protection | Session | HostHero |
| __stripe_mid | Payment processing security | 1 year | Stripe |
| __stripe_sid | Payment session identifier | 30 minutes | Stripe |
Legal Basis: These cookies are strictly necessary for the performance of our contract with you and do not require consent.
3.2 Functional Cookies (Preferences)
These cookies remember your preferences and choices to provide enhanced, personalized features.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
| language_preference | Stores your preferred language (en, es, fr, de, it, pt) | 1 year | HostHero |
| timezone | Remembers your timezone for accurate time display | 1 year | HostHero |
| theme_preference | Stores light/dark mode preference | 1 year | HostHero |
| sidebar_collapsed | Remembers dashboard sidebar state | 1 year | HostHero |
| default_property | Stores your default property selection | 1 year | HostHero |
Legal Basis: Legitimate interest in providing a better user experience. You can disable these cookies, but some preferences may not persist.
3.3 Analytics Cookies (Performance)
These cookies help us understand how visitors interact with our Service by collecting anonymous information about page visits and feature usage.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
| _hh_analytics_id | Anonymous visitor identifier | 1 year | HostHero |
| _hh_session | Session tracking for analytics | 30 minutes | HostHero |
| _hh_first_visit | First visit timestamp | 1 year | HostHero |
| _hh_referrer | Original referral source | Session | HostHero |
Data Collected:
- Pages visited and time spent
- Features used and interaction patterns
- Device type, browser, and operating system
- General geographic location (country/region level)
- Referral source
What We Do NOT Track:
- Personal identifying information
- Specific IP addresses (hashed only)
- Cross-site browsing activity
- Advertising profiles
Legal Basis: Legitimate interest in improving our Service. You can opt out of analytics cookies without affecting core functionality.
4. Cookies for Different User Types
4.1 Host Dashboard Cookies
When you log in as a host, we use cookies to:
- Maintain your authenticated session
- Remember your organization and property selections
- Store dashboard preferences (layout, filters)
- Track feature usage for product improvement
4.2 Guest Chat Cookies
When you access HostHero as a guest via QR code:
- Minimal cookie usage: We use only essential session cookies
- No account required: No persistent authentication cookies
- Language detection: We may set a language preference cookie based on your browser settings
- Session expiry: Guest session cookies expire after 24 hours of inactivity
4.3 Marketing Website Cookies
On our public marketing pages (hosthero.io):
- Essential cookies for site functionality
- Analytics cookies to understand visitor behavior
- Marketing cookies to measure advertising effectiveness (with consent)
5. Third-Party Cookies
We work with trusted third parties who may set cookies on our behalf:
5.1 Authentication (Supabase)
Our authentication provider sets cookies necessary for secure login. These cookies:
- Are essential for account security
- Cannot be disabled while using authenticated features
- Are subject to Supabase's Privacy Policy
5.2 Payment Processing (Stripe)
When you access billing features, Stripe may set cookies to:
- Prevent fraud
- Process payments securely
- Remember payment preferences
These cookies are subject to Stripe's Cookie Policy.
5.3 Marketing and Advertising Cookies
We may use marketing cookies to measure the effectiveness of our advertising campaigns and understand how visitors arrive at our site. These cookies:
- Help us understand which marketing channels are most effective
- Allow us to measure advertising campaign performance
- May be set by third-party advertising platforms
- Require your consent before being activated
You can opt out of marketing cookies at any time through our cookie consent banner or by adjusting your cookie preferences.
7. Local Storage and Similar Technologies
In addition to cookies, we use:
7.1 Local Storage
We use browser local storage for:
- Guest chat messages: Temporary message storage for session continuity
- UI state: Dashboard preferences and collapsed panels
- Draft content: Unsaved form data protection
Local storage data is cleared when you log out or clear your browser data.
7.2 Session Storage
We use session storage for:
- Temporary form data during multi-step processes
- Navigation state within the application
Session storage is automatically cleared when you close your browser tab.
8. Cookie Retention Periods
| Cookie Category | Typical Duration | Notes |
|---|---|---|
| Essential (Session) | Until browser closes | Temporary session management |
| Essential (Auth) | 7 days | Refresh token for "remember me" |
| Functional | 1 year | Preference persistence |
| Analytics | 1 year | Usage pattern analysis |
| Guest Session | 24 hours | Absolute timeout for security |
9. Updates to This Policy
We may update this Cookie Policy to reflect:
- Changes in our cookie usage
- New features requiring different cookies
- Changes in applicable law or regulations
We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Displaying a notice requesting renewed consent if required
10. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the right to:
- Access: Know what cookies we use and why
- Object: Refuse non-essential cookies
- Withdraw Consent: Change your cookie preferences at any time
- Erasure: Request deletion of cookie data we hold
To exercise these rights, contact us at privacy@hosthero.io or use the cookie settings panel.
11. Your Rights Under CCPA
If you are a California resident, you have the right to:
- Know what personal information is collected via cookies
- Request deletion of cookie-related data
- Opt-out of the "sale" of personal information (note: we do not sell data)
- Non-discrimination for exercising your privacy rights
12. Children's Privacy
Our Service is not intended for individuals under 18. We do not knowingly use cookies to collect information from children. Guest chat functionality does not set persistent tracking cookies that could identify minors.
13. Contact Us
If you have questions about our use of cookies, please contact us:
HostHero.io
Email: privacy@hosthero.io
Data Protection Officer (for GDPR-related inquiries):
Email: dpo@hosthero.io