Cookie Policy
What Are Cookies
Cookies are small text files that are placed on your device when you visit a website. They help websites remember information about your visit, such as your language preference or login status.
This Cookie Policy explains what cookies are, how we use them, and how you can manage them. The canonical inventory of all cookies and client-side storage used by this platform is maintained at docs/privacy/cookie-inventory.md.
Cookies We Use
Strictly Necessary
These cookies are essential for the website to function properly. They enable core functionality such as authentication and session management and cannot be disabled.
| Name | Type | Expiry | Set By | Purpose |
|---|---|---|---|---|
| __session | Session | Browser close | Auth.js | Authentication session token — identifies the signed-in user |
| next-auth.session-token | Session | Browser close | Auth.js | JWT session token set by Auth.js to maintain authenticated sessions |
| __client_uat | Persistent | 1 year | Auth.js | Detects session freshness without a round-trip to the server |
| impersonate_user_id | Persistent | 8 hours | First-party | Stores the target user ID during a platform admin impersonation session |
| impersonate_user_role | Persistent | 8 hours | First-party | Stores the target user role during a platform admin impersonation session |
Functional
These cookies and browser storage keys allow the website to remember choices you make, such as your language preference, to provide a more personalised experience.
| Name | Type | Expiry | Set By | Purpose |
|---|---|---|---|---|
| NEXT_LOCALE | Persistent cookie | 1 year | First-party (next-intl) | Stores your preferred display language (e.g. sv, no, en) across visits |
| chatbot_session_id | localStorage key | Until cleared | First-party | Unique identifier for the support chatbot session; maintains conversation continuity across page loads |
Analytics
We use Google Analytics 4 only after you have actively accepted analytics cookies. These cookies help us understand aggregate usage, improve onboarding, and measure whether owners and campers can complete key flows. Analytics remains off when you reject or withdraw consent.
| Name / Pattern | Type | Expiry | Set By | Purpose |
|---|---|---|---|---|
| _ga | Persistent | 2 years | Google Analytics 4 | Distinguishes pseudonymous visitors for aggregate usage analytics after consent |
| _ga_<measurement-id> | Persistent | 2 years | Google Analytics 4 | Persists GA4 session state after analytics consent |
| va-* | Persistent | 1 year | Vercel Analytics | Tracks page views and web vitals for aggregate performance analytics after analytics consent |
Third-Party
Some features of our website rely on third-party services that may set their own cookies on your device or on their own domains.
| Name / Pattern | Type | Expiry | Set By | Purpose |
|---|---|---|---|---|
| __stripe_mid, __stripe_sid | Persistent / Session | 1 year / Session | Stripe (checkout.stripe.com) | Fraud prevention and session tracking during payment checkout. Not set on this domain. |
| hmt (and related) | Persistent | Varies | hCaptcha (hcaptcha.com) | Anti-bot verification on pages with user-submitted forms |
| Mapbox tile cookies | Session | Session | Mapbox (api.mapbox.com) | Tile request authentication and rate-limiting when map components are rendered. No persistent tracking cookies on this domain. |
Cookie Consent
The cookie consent mechanism is live. When you first visit the platform, a banner asks you to accept all cookies, reject non-essential cookies, or customise your preferences by category. Your choice is stored and honoured on every subsequent page load — analytics and other non-essential scripts are only loaded after you have given explicit consent.
You can review or change your cookie preferences at any time using the Cookie settings link in the footer. Withdrawing consent takes effect immediately — non-essential cookies will no longer be loaded until you consent again.
- Strictly necessary cookies (authentication session cookies and platform admin impersonation tokens) are always set — they are essential for the service to function and do not require your consent.
- Functional cookies (
NEXT_LOCALEfor language preference andchatbot_session_idfor support chat continuity) are always set — they are needed for the basic user experience you have requested. - Analytics cookies are only loaded after you have actively accepted them. You can withdraw consent at any time via Cookie settings.
- Third-party cookiesset by Stripe, hCaptcha, and Mapbox on their own domains are governed by those services' own consent mechanisms.
How to Manage Cookies
You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will affect core functionality such as staying logged in. Below are links to cookie management instructions for popular browsers:
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. Any changes will be posted on this page with a revised “Last updated” date at the top. We encourage you to review this policy periodically.