Cookie policy

What cookies are

Cookies are small files a website saves in your browser. Some are needed for a site to work, and others track what you do. Haabtime always uses the first kind, and uses the second kind only with your consent.

Cookies Haabtime sets

Name	Purpose	Lifetime	Type
_haabtime_session	Keeps you signed in and protects forms against cross-site request forgery.	Browser session	Essential, first-party
haabtime_consent	Remembers whether you accepted or declined analytics, so we do not ask again on every page.	12 months	Essential, first-party
ph_<token>_posthog	Analytics state in your browser's local storage: an analytics session and, for signed-in hosts, your account ID, so replays and events can be linked. Only after you accept.	Until you clear it or withdraw	Analytics, first-party storage
__ph_opt_in_out_<token>	Local storage note that you accepted analytics in this browser, so it can be paused and resumed. Only after you accept.	Until you clear it or withdraw	Analytics, first-party storage
haabtime_analytics_identified	Local storage note that this browser was linked to a signed-in host, so a later visitor on the same browser is not linked to them. Only after you accept.	Until you clear it or withdraw	Analytics, first-party storage
haabtime_replay_sample, ph_<token>_posthog, ph_<token>_primary_window_exists, ph_<token>_session_registered_properties	Session storage: whether this browser tab is part of the replay sample, plus the analytics session and tab identifiers. Only after you accept.	Until you close the tab, or withdraw	Analytics, first-party storage

The session cookie holds a random session ID and, once you sign in, an identifier for your account. It is set when you visit pages that have forms or sign-in, such as the home and login pages, even if you never sign in. It is not set on booking pages, including ones embedded in other websites.

The consent cookie is set when you make a choice in the banner. On booking pages that means invitees receive a Haabtime cookie only if they answer the banner. Booking pages embedded in other websites show no banner and set no cookie.

The rows marked Analytics use your browser's storage, not cookies, and exist only after you accept analytics. Withdrawing removes all of them.

Analytics and your choice

The first time you visit, a banner asks whether Haabtime may use analytics. If you accept, we use PostHog, with data stored in the EU, to see how hosts use Haabtime and how bookings progress. On your signed-in pages and on booking forms, about one in four sessions is also recorded as a session replay, and only those sessions load PostHog in your browser. For signed-in hosts, replays and events are linked to your account ID; guests who accept are recorded anonymously and are never identified. Replays mask everything you type and the text on the page, but still show the page layout, your clicks and scrolling, and page addresses. Confirmation and cancellation pages, the home page, the sign-in page and booking pages embedded in other websites are never recorded. Nothing loads from PostHog and nothing is stored until you choose Accept. When replay starts, your browser also loads a small script from PostHog's EU servers, along with its settings.

Choosing Decline, or withdrawing later, stops analytics and replay. When you are signed in as a host, your choice is saved to your account and applies on every browser you use. For guests it is saved only in the consent cookie above.

You can change your choice at any time with the Cookie settings button in the footer, or in the header when you are signed in. Booking pages embedded in other websites do not show the banner and do not run analytics.

Cookies from other services

When you leave Haabtime to sign in with Google or to pay on Stripe Checkout, you are on their websites, and they set their own cookies under their own policies, including for security and fraud prevention:

Controlling cookies

You can block or delete cookies in your browser settings. Blocking the session cookie means hosts cannot stay signed in. Deleting the consent cookie makes the banner ask you again. Signing out of Haabtime ends the session.

Contact

Questions about cookies or privacy: [email protected]. More about how we handle data is in the privacy policy.