Cookie Policy

1. Cookies we use

We only use technical cookies, required for the service to work. Under the Spanish DPA (AEPD) guidance they are exempt from consent, which is why you see no cookie banner:

  • oxt_session: user session (httpOnly, signed, 30 days). Keeps you signed in.
  • NEXT_LOCALE: your language preference from the footer selector (httpOnly, 1 year).
  • Payment provider cookies during checkout: the payment gateway (Stripe, or our wholesale provider's gateway depending on the charging mode) sets its technical anti-fraud cookies (e.g. __stripe_mid, __stripe_sid) only at the payment step.
  • Hotel map (OpenStreetMap): each hotel page embeds a map from openstreetmap.org; when it loads, that third party receives your IP address and may set its own technical cookies under its policy.

2. What we do NOT use

We use no analytics, advertising or third-party tracking cookies. If any were ever added, this policy would be updated and prior consent requested through a banner.

3. Managing cookies

You can delete or block cookies in your browser settings. Without the session cookie you cannot stay signed in; without the language cookie, the site falls back to your browser's language.

Cookie Policy · 0xTravel