Cookie Policy
Last updated: June 20, 2026
We use a small number of cookies and similar technologies. Strictly-necessary ones keep you logged in and your payments secure — these are always on. Anything else (diagnostics) only runs after you consent. You can change your choice anytime by clearing the sc_consent cookie, which re-opens the consent banner.
1. What are cookies?
Cookies are small text files stored on your device. Some are essential for the site to function; others help us understand and improve it. Under the EU ePrivacy Directive (Art. 5(3)) we may only place non-essential cookies with your prior consent.
2. Strictly-necessary cookies (no consent required)
Supabase authentication — keeps you signed in and protects your session. Set by our authentication provider, Supabase. Without these you cannot log in.
Stripe payment security — Stripe sets cookies during checkout to prevent fraud and secure card payments. These are essential to processing a booking. See Stripe's cookie information.
Consent cookie (sc_consent) — remembers your cookie choices so we don't ask on every visit. Stored for 180 days.
3. Diagnostics (consent required in your browser)
Sentry (in-browser) — error and performance monitoring that runs in your browser to help us detect and fix bugs. It does not load until you grant the “Diagnostics” category; if you reject it, no in-browser Sentry runs. We disable session replay, and we do not attach your IP address or email to these reports.
Server-side error logging — separately, when an error happens on our servers we log it (via Sentry) to keep the service reliable. This runs for everyone on the basis of our legitimate interest in operating the platform, and it is configured not to collect personal data — no IP address, email, or account identifiers leave our servers. It does not place anything on your device, so it is not subject to cookie consent.
4. What we do NOT use
We do not use advertising, marketing, or third-party analytics cookies (no Google Analytics, no Meta Pixel, no ad networks). We do not sell your data.
5. Managing your consent
When you first visit, a banner lets you accept all, reject non-essential, or customize per category. To change your decision later, clear the sc_consent cookie in your browser settings and reload — the banner will reappear. For signed-in users we keep a record of each consent choice (date, categories, IP, browser) to demonstrate a lawful basis, as required by GDPR Art. 7.
6. More information
See our Privacy Policy for how we process personal data and your rights, or contact privacy@surf-connect.com.