What cookies are
Cookies are small pieces of information stored by your browser. They can help a site remember secure session information or user preferences.
Cookies currently used
The application currently uses an essential session cookie named sid for signed-in Platform Admin, hotel staff, and restaurant staff users.
- Purpose: keeps a signed-in staff session active and supports protected staff/admin actions.
- Type: essential authentication and security cookie.
- Security: HTTP-only, SameSite=Lax, and Secure in hosted HTTPS environments.
- Duration: tied to the authenticated session and currently created with a limited session lifetime.
The current CSRF protection uses a session-linked token sent in request headers for protected actions. It is not implemented as a separate browser cookie.
No analytics or marketing cookies
We do not currently use analytics cookies, advertising cookies, retargeting pixels, or marketing tracking cookies. Because the cookie behavior is limited to essential session/security use, the website does not include a cookie consent banner.
If cookies are disabled
Public marketing pages and public application pages may still load, but staff/admin login and protected portal actions may not work correctly without the essential session cookie.
Future changes
If Breakfast Booking later adds analytics, marketing tools, embedded third-party tracking, or non-essential cookies, this policy and the consent experience should be reviewed before those tools go live.
Contact
For cookie questions, use the Breakfast Booking contact page. The final client-owned contact mailbox is pending approval.