Last updated: July 17, 2026
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and keep you logged in.
This is the complete list — audited against the running app, not boilerplate. We run no analytics or advertising cookies.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| geofares-consent | Remembers your cookie banner choice (also mirrored in localStorage under the same name). | 1 year | Essential |
| NEXT_LOCALE | Remembers your language so pages render in it straight away. | Session | Essential |
| sb-<project>-auth-token (may split into .0/.1 chunks) | Your login session, set by Supabase Auth when you sign in. Includes a -code-verifier variant briefly during Google/Apple sign-in. | About 1 year, refreshed while you use the app | Essential |
| __stripe_mid / __stripe_sid | Fraud prevention during payment, set by Stripe on the checkout page only. | 1 year / 30 minutes | Essential (payments) |
| Travelpayouts attribution cookies | Affiliate attribution script from our booking-partner network. Only loads if you chose “Accept All”, and never on login or password pages. | Set by Travelpayouts | Non-essential |
We also use browser localStorage (not a cookie) for the same consent value, so the banner doesn't reappear on every visit.
When you first visit GeoFares, the consent banner lets you pick “Accept All” or “Essential Only”. The only thing “Accept All” adds is the Travelpayouts attribution script — everything else is required for login, payments, or remembering this very choice.
Changed your mind? This clears your choice and shows the banner again:
You can also manage or delete cookies in your browser settings. Blocking the essential ones will break login and checkout.
Questions about our cookie usage? Contact us at contact@geofares.com.
