Cookie Policy
Version 2.0 — Last updated: April 30, 2026
1. Cookies and local storage
Cookies are small text files placed on your device by websites, for example to remember preferences or identify a session. Local storage is a browser mechanism that stores information on your device without automatically sending it with every HTTP request.
We use both technologies minimally for essential service operation. We do not use advertising-tracking cookies, Google Analytics, Facebook Pixel, TikTok Pixel or other profiling services.
2. HTTP cookies we use
| Cookie | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
_cf_bm | Cloudflare | Bot protection and website security | Approximately 30 minutes | Strictly necessary |
| Authentication cookies / tokens | Rezervatio.AI authentication service | Maintaining a secure authenticated session | Session or limited lifetime, with controlled renewal | Strictly necessary |
These cookies are essential for providing the service and do not require prior consent under Art. 5(3) of the ePrivacy Directive and applicable Romanian Law no. 506/2004.
3. Information stored locally in the browser
| Item | Purpose | Category |
|---|---|---|
| Theme and language | Remembering interface preferences | Functional |
| Dashboard preferences | Active organisation, sidebar and display settings | Functional |
rz-consent-v2 | Saving cookie preferences | Compliance / necessary |
| Onboarding drafts | Restoring an unfinished setup | Functional |
Local-storage information remains on your device unless a particular function explicitly sends data to the service. You can delete it through your browser settings.
We do not use:
- Tracking cookies (Google Analytics, Facebook Pixel, etc.)
- Advertising cookies
- Profiling cookies
4. Visit analytics (legitimate interests)
We use an internal, privacy-oriented system to understand aggregated website traffic. It records the page visited, referrer, browser type and operating system. The IP address is immediately transformed using a SHA-256 hash with a rotating daily key; the raw IP address is not retained in the analytics record.
- No tracking cookie or external analytics service is used for this purpose.
- We do not build cross-site profiles or identify individual visitors.
- Analytics records are retained for up to 30 days.
The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in obtaining aggregate statistics and improving the service. You may object under Art. 21 GDPR by contacting privacy@rezervatio.ai.
5. External resources (CDNs)
| Provider | Resource | Purpose |
|---|---|---|
| Cloudflare | Security, content delivery and Turnstile | Availability and abuse prevention |
| FlagCDN | Language flag images | Interface display |
When such resources are loaded, the provider may receive technical connection data such as the IP address. These providers are described in the Privacy Policy and Annex III of the DPA.
6. How to control cookies and storage
6.1 Consent banner
On the first visit, the banner explains our use of cookies and lets you accept or choose essential technologies only. Your choice is stored locally as rz-consent-v2 and can be changed through the “Cookie preferences” link in the website footer.
6.2 Browser settings
- You may delete cookies and local storage through your browser's privacy settings.
- You may block cookies, but blocking strictly necessary technologies can prevent authentication and essential functions from working.
- You may disable JavaScript, but the website and dashboard will not function correctly.
7. Changes to this policy
We may update this Cookie Policy to reflect technical or legal changes. The current version and last-updated date are always displayed on this page.
8. Contact
For questions about cookies or browser storage, contact privacy@rezervatio.ai.
Last updated: April 30, 2026 — Version 2.0
EU · Data protection under GDPR