Cookie Policy
Version 2.1 — Last updated: September 15, 2026
1. Cookies and local storage
Cookies are small text files placed on your device by websites, for example to remember preferences or identify a session. Local storage is a browser mechanism that stores information on your device without automatically sending it with every HTTP request.
We use both technologies minimally for essential service operation. We do not use advertising-tracking cookies, Google Analytics, Facebook Pixel, TikTok Pixel or other profiling services.
2. HTTP cookies we use
| Cookie | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
__cf_bm | Cloudflare | Bot protection and website security | 30 minutes of inactivity | Strictly necessary |
| Authentication cookies / tokens | Rezervatio.AI authentication service | Maintaining a secure authenticated session | Session or limited lifetime, with controlled renewal | Strictly necessary |
Storage strictly necessary to transmit communications or provide the requested service is exempt from prior consent under Article 5(3) of the ePrivacy Directive and Article 4(6) of Romanian Law 506/2004. Optional statistics require separate consent.
3. Information stored locally in the browser
| Item | Purpose | Category |
|---|---|---|
| Theme and language | Remembering interface preferences | Functional |
| Dashboard preferences | Active organisation, sidebar and display settings | Functional |
rz-consent-v2 / rz-cookies | Saving cookie preferences | Compliance / necessary |
| Onboarding drafts | Restoring an unfinished setup | Functional |
Local-storage information remains on your device unless a particular function explicitly sends data to the service. You can delete it through your browser settings.
We do not use:
- Tracking cookies (Google Analytics, Facebook Pixel, etc.)
- Advertising cookies
- Profiling cookies
4. Optional visit statistics
On pages using internal statistics, a visit is sent only after you enable “Analytics”. Without a choice or after “Essential only”, the website does not send this record. The basis for this optional analysis is consent under Art. 6(1)(a) GDPR.
- Data may include the visited page, the referring domain, approximate country and browser information. The website does not send the referrer URL path or query parameters to this function.
- The statistics function receives the IP address and stores a SHA-256 hash calculated with the current date, as well as the raw IP. The hash is a pseudonymous identifier, not a guarantee of anonymisation.
- The retention routine removes raw IP addresses older than 30 days. This limit applies to raw IP addresses, not the entire statistics history.
- No tracking cookies or external analytics services are used for these statistics. Statistical visits are deleted after 90 days; raw IPs are removed after 30 days. Information and requests: privacy@rezervatio.ai.
You may withdraw consent through “Cookie preferences”. Withdrawal stops future website records; it does not automatically erase data already sent. Technical processing needed for security and authentication remains separate, as described in the Privacy Policy.
5. External resources (CDNs)
| Provider | Resource | Purpose |
|---|---|---|
| Cloudflare | Security, content delivery and Turnstile | Availability and abuse prevention |
| FlagCDN | Language flag images | Interface display |
| jsDelivr | Supabase JavaScript library on pages that load it | Authentication |
When an external resource loads, its provider may receive IP and technical connection data. The role depends on the service and applicable terms; serving a public resource does not automatically make that provider a sub-processor for business customer data.
6. How to control cookies and storage
6.1 Consent banner
On the first visit, the banner explains our use of cookies and lets you accept or choose essential technologies only. Your choice is stored locally as rz-consent-v2 / rz-cookies and can be changed through the “Cookie preferences” link in the website footer.
6.2 Browser settings
- You may delete cookies and local storage through your browser's privacy settings.
- You may block cookies, but blocking strictly necessary technologies can prevent authentication and essential functions from working.
- You may disable JavaScript, but the website and dashboard will not function correctly.
7. Changes to this policy
We may update this Cookie Policy to reflect technical or legal changes. The current version and last-updated date are always displayed on this page.
8. Contact
For questions about cookies or browser storage, contact privacy@rezervatio.ai.
Last updated: September 15, 2026 — Version 2.1