Cookie Policy
Transparency about how we use cookies and browser storage to power your Stayza experience.
Last updated: September 24, 2026
Your Active Consent Status
You can customize or revoke optional cookies at any time.
| Storage Type | Required | You Can Disable |
|---|---|---|
| Essential | ✓ | ✗ |
| Analytics | — | ✓ |
| Preferences | — | ✓ |
Introduction
Stayza uses cookies and browser storage to keep you signed in, remember your preferences, improve performance, and secure your account. This page explains what we use and how you can control optional storage.
Analytics and preference storage are optional and can be disabled from this page. Essential storage — required for authentication and security — cannot be disabled because the platform cannot function without it.
Cookies & Browser Storage
Cookies are small text files that a website stores on your device through your browser. They are commonly used for authentication, security, and remembering user preferences.
Local Storage and Session Storage are similar browser technologies that let websites save data on your device. Local Storage persists until explicitly cleared; Session Storage is automatically deleted when you close the browser tab.
Stayza uses a combination of cookies, local storage, and session storage. This policy covers all three, referred to collectively as "cookies and browser storage."
Cookies & Browser Storage We Use
This is the complete list of cookies, browser storage and measurement on Stayza. We don't use advertising or social-media trackers. Optional items only run after you allow their category. One item, Cloudflare Web Analytics, runs for every visitor: it uses no cookies and stores nothing on your device.
| Name | Provider | Purpose | Type | Category | Duration |
|---|---|---|---|---|---|
| sb-…-auth-token | Supabase (for Stayza) | Keeps you signed in to your account. | Local storage | Essential | Until you sign out (session storage if you untick “Keep me signed in”) |
| stayza.remember | Stayza | Remembers whether you chose “Keep me signed in”. | Local storage | Essential | Until you sign out or clear site data |
| stayza_cookie_consent | Stayza | Stores the cookie choices you made, so we don't ask on every visit. | Local storage | Essential | 12 months, then we ask again |
| stayza_intended_role | Stayza | Remembers that you started signing up as a property owner. | Local storage | Essential | Until sign-up finishes |
| stayza_pending_email_verify | Stayza | Lets this tab finish verifying the email address you just signed up with. | Session storage | Essential | 30 minutes |
| stayza_owner_lang | Stayza | Remembers the language (English or Urdu) you chose for the property owner screens. | Local storage | Essential | Until you change it or clear site data |
| stayza-draft-hostel-… | Stayza | Saves a listing you are still writing, so you don't lose your work. | Local storage | Essential | Until you publish or discard the draft |
| stayza.savedSearches | Stayza | Searches you chose to save. | Local storage | Essential | Until you remove them |
| stayza.ref, stayza.refAttached | Stayza | If you arrived through a friend's invite link, remembers the code so they get credit when you sign up. | Local storage | Essential | Until the referral is credited |
| stayza-banner-dismissed:… | Stayza | Hides a site announcement you closed. | Session storage | Essential | Until you close the tab |
| scrollToSection | Stayza | Scrolls you to the right section after moving between pages. | Session storage | Essential | Deleted as soon as it is used |
| tsr-scroll-restoration-… | Stayza | Returns you to the same scroll position when you go back a page. | Session storage | Essential | Until you close the tab |
| tms.activeOrganizationId | Stayza | Staff tools only: remembers which team workspace you had open. | Local storage | Essential | Until you clear site data |
| __cf_bm | Cloudflare | May be set by our network provider to tell people apart from automated bots. | Cookie | Essential | 30 minutes |
| Cloudflare Web Analytics | Cloudflare | Counts visits and measures how fast pages load, for every visitor. Sends the page address, the referring page, your browser type and load timings. Uses no cookies and stores nothing on your device. | None (cookieless) | Always on, no cookies | Nothing is stored on your device |
| stayza_content_origin | Stayza | Connects the last guide read to marketplace and contact actions in the same tab, after analytics consent. | Session storage | Analytics | Attribution expires after 30 minutes; removed when consent is withdrawn or the tab closes |
| stayza_session_id | Stayza | A random ID that groups the pages you view in one visit. It is not linked across visits. | Session storage | Analytics | Until you close the tab |
| stayza_utm_source, _medium, _campaign | Stayza | Records which ad or link brought you to Stayza. | Session storage | Analytics | Until you close the tab |
| stayza_city, stayza_country | Stayza, using geojs.io | Your approximate city, estimated from your IP address, for city-level usage reports. | Session storage | Analytics | Until you close the tab |
| Vercel Web Analytics & Speed Insights | Vercel | Anonymous page-view counts and page-speed measurements. Uses no cookies or identifiers. | None (cookieless) | Analytics | Nothing is stored on your device |
| stayza_content_origin | Stayza | Connects guide visits to accommodation discovery and owner contacts, with your analytics consent. | Session storage | Analytics | Until you close the tab; used for up to 30 minutes |
| stayza.recentlyViewed | Stayza | The last listings you opened, so you can find them again. | Local storage | Preferences | Until you clear it or turn off Preferences |
| stayza.searchHistory | Stayza | Your recent searches and filters. | Local storage | Preferences | Until you clear it or turn off Preferences |
| ai_recent_searches | Stayza | Your last few AI Search questions. | Local storage | Preferences | Until you clear it or turn off Preferences |
Cloudflare sets its cookie itself, and may rename it or change how long it lasts.
Essential Storage
Essential cookies and browser storage are strictly necessary for Stayza to function. They handle authentication, security, and traffic protection.
Without these, you cannot sign in, search for accommodations, or use protected features. Essential storage does not require consent because it is necessary for the platform to operate.
Authentication
When you sign in to Stayza, your authentication token is stored in your browser's local storage. This token confirms your authenticated session as you navigate the site.
For security purposes, these tokens keep your session active, protect your account from unauthorized access, and help prevent session hijacking.
Analytics
When you allow Analytics, Stayza records which pages and listings you view, your searches, how you arrived (for example, from an ad link), your device type and browser, and your approximate city. To estimate the city, your browser sends your IP address to geojs.io once per visit. A random session ID in session storage links the events of a single visit. If you are signed in, the events are linked to your account. We also load Vercel Web Analytics and Speed Insights, which count page views and measure page speed without cookies or identifiers.
We use this to fix slow or broken pages and to improve search. We don't sell it or use it for advertising.
If you reject analytics, we still count a few service events that listing owners depend on: listing views, search appearances, taps on Call or WhatsApp, and inquiries sent. These counts use no cookie, session ID, account link, referrer or location. They record only the page path, device type and browser. Nothing is stored on your device for them.
Analytics storage is optional and can be disabled from this page.
Preference Storage
Preference storage remembers things on this device so you don't have to find them again: listings you viewed recently, your recent searches, and your recent AI Search questions. If you turn Preferences off, we delete them from your device.
Preference storage is optional and can be disabled from this page.
Third-Party Services
Stayza integrates a limited number of vetted third-party services. Some of these services may set their own cookies or use browser storage. Each provider processes data according to its own privacy policy.
Supabase
Powers user authentication, data storage, and database queries. Stores authentication tokens in your browser's local storage.
Cloudflare
Delivers and protects the website, and may set a security cookie to block bots. Cloudflare Web Analytics also counts visits and page speed for every visitor, without cookies and without storing anything on your device.
OpenStreetMap
Our maps load their images from OpenStreetMap's servers, which receive your IP address the way any website does. They set no cookies. Google Maps only opens if you tap “Open in Google Maps”, and from then on Google's own policy applies.
Vercel
Hosts the website. If you allow Analytics, Vercel's cookieless page-view and page-speed measurement also runs.
Resend
Delivers transactional emails such as verification links and account updates. Resend operates server-side and does not place any cookies or browser storage on your device.
Managing Settings
You can control optional analytics and preference storage using the toggles above, then save your choice. Your browser also allows you to manage cookies and site data globally through its settings.
We keep your choice for 12 months, then ask again. You can change it at any time from “Cookie Preferences” in the footer of every page.
Note: Disabling cookies or clearing browser storage may affect functionality, including signing you out or resetting your saved preferences.
Browser Cookie Settings Guide
To manage cookies and browser storage globally across all websites, choose your browser:
Google Chrome
1. Click the ⋮ menu at the top right.
2. Go to Settings → Privacy and Security.
3. Click Third-party cookies.
4. Choose your preferred blocking level or add exceptions.
Mozilla Firefox
1. Click the ☰ menu and select Settings.
2. Go to Privacy & Security.
3. Under Enhanced Tracking Protection, choose Standard, Strict, or Custom.
Microsoft Edge
1. Click ⋯ and select Settings.
2. Go to Cookies and site permissions → Manage and delete cookies and site data.
3. Toggle your preferred blocking options.
Apple Safari
1. Choose Safari → Settings (or Preferences).
2. Click the Privacy tab.
3. Configure cross-site tracking prevention or block all cookies.
We may update this Cookie Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes may also be communicated through the platform.
Questions or concerns?
Privacy & Legal
legal@stayza.pkGeneral
hello@stayza.pkNeed legal assistance?
Our compliance team is here to answer your questions about cookies, browser storage, and user privacy.