Cookie policy
Last updated 9 October 2026
We don't use advertising cookies or third-party trackers. These are all the cookies and similar storage we use:
| Name | Purpose | Lasts | Type |
|---|---|---|---|
| authjs.session-token, authjs.csrf-token, authjs.callback-url | Keep you signed in and protect sign-in forms | Session up to 30 days | Essential |
| cal_oauth | Protects the calendar-connection step against forgery | 10 minutes | Essential |
| bk_src | Remembers where you first came from (campaign, referring site or page), saved to your account when you sign up | 60 days | Analytics (first-party, no tracking across sites) |
| bk_view_as | Staff only: a time-limited read-only support view | 30 minutes | Essential |
| theme (local storage) | Remembers light or dark mode | Until cleared | Preference |
| booking:timeZone (local storage) | Remembers the time zone you picked on booking pages | Until cleared | Preference |
Booking-page visit counts for hosts are measured without cookies, using a hash that changes daily and can't identify you. Payments pages hosted by Stripe set Stripe's own cookies for fraud prevention.
You can clear or block cookies in your browser; essential ones are needed to sign in.