Cookie Policy

This Cookie Policy explains how StayPay Ltd ("we", "us", "our") uses cookies and similar tracking technologies on our website (usestaypay.com) and across the StayPay platform, including the host dashboard, guest welcome guide, concierge partner portal, and local business dashboard.

By continuing to use our website or platform, you consent to the use of cookies as described in this policy. You can manage or withdraw your consent at any time using your browser settings or the cookie preference options available on our site.

This Cookie Policy should be read alongside our Privacy Policy and Terms of Use, both of which are available at usestaypay.com.

---

1. WHAT ARE COOKIES?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website or use a web application. They allow the website to recognise your device, remember your preferences, and collect information about how you use the platform.

Cookies are widely used to make websites and applications work effectively and to provide useful information to website owners. They are not viruses or malicious software and cannot access other data on your device.

In addition to cookies, we may also use similar technologies including:

- Local storage — browser-based storage used to maintain session state within the platform

- Pixel tags / web beacons — small image files that help us understand email open rates and page visits

- Session identifiers — tokens used to keep you logged in during an active session

---

2. WHERE WE USE COOKIES

Cookies and similar technologies are used across the following StayPay surfaces:

- usestaypay.com — our public marketing website

- The Host Dashboard — the web application used by hosts to manage properties, services, and guest interactions

- The Guest Welcome Guide — the web-based guide accessed by guests via QR code, link, or property ID

- The Concierge Partner Portal — the web application used by concierge partners to manage listings, requests, and payouts

- The Local Business Dashboard — the web application used by local businesses to manage offers, view analytics, and track redemptions

The types of cookies used may vary between these surfaces depending on their function. The guest welcome guide uses the minimum cookies necessary to deliver the service, in keeping with our data minimisation principles.

---

3. TYPES OF COOKIES WE USE

Essential Cookies

These cookies are strictly necessary for the website and platform to function correctly. They cannot be switched off in our systems as they are required to deliver core functionality. Without these cookies, certain features of the platform — such as staying logged in, maintaining your session, or completing a payment — would not work. Essential cookies do not require your consent under applicable law.

Functional Cookies

These cookies allow the platform to remember choices you make (such as your language preference or property selections) and provide enhanced, more personalised features. They are set either by us or by third-party providers whose services we have added to our platform.

Analytics Cookies

These cookies help us understand how visitors interact with our website and platform — for example, which pages are visited most frequently, how long users spend on each page, and where users navigate from. This information is collected in an aggregated and anonymised form and is used solely to improve the platform experience. We do not use analytics cookies to identify you personally or for advertising purposes.

Third-Party Service Cookies

Some features of the StayPay platform are delivered through trusted third-party providers. These providers may set their own cookies on your device as part of delivering their service. We have no direct control over these cookies, but all third-party providers we work with are required to comply with applicable data protection and cookie laws.

---

4. COOKIES WE USE

Session Cookie Purpose: Maintains your authenticated session while logged in to the host dashboard, concierge partner portal, or local business dashboard. Required for core platform function. Provider: StayPay / Supabase Retention: Session (deleted on browser close)

Auth Token Purpose: Stores a secure authentication token to keep hosts, concierge partners, and local businesses logged in across page loads. Provider: StayPay / Supabase Retention: 24 hours (standard) or up to 30 days (if Remember Me is selected at login)

CSRF Token Purpose: Protects against cross-site request forgery attacks. Required for platform security. Provider: StayPay Retention: Session

Preference Cookie Purpose: Remembers user interface preferences (e.g. last selected property or tab) to improve the dashboard experience. Provider: StayPay Retention: 30 days

Analytics (Aggregated) Purpose: Tracks anonymised page views, session duration, and navigation paths to help us improve the platform. No personally identifiable data is collected. Provider: Analytics provider (e.g. PostHog or equivalent) Retention: Up to 12 months

Stripe.js Purpose: Set by Stripe to help detect fraudulent activity and ensure secure payment processing. Required for guest add-on payments. Provider: Stripe Retention: Varies (up to 1 year)

This list will be updated as our cookie usage evolves. If you have questions about a specific cookie not listed here, please contact us at privacy@usestaypay.com.

---

5. COOKIES WE DO NOT USE

StayPay does not use:

- Advertising or tracking cookies — we do not run targeted advertising campaigns and do not use cookies to track you across other websites

- Behavioural profiling cookies — we do not build individual user profiles based on browsing behaviour

- Social media tracking pixels — we do not embed social media tracking technology that monitors your activity across platforms

We will never use cookies to identify guests personally or to profile guest behaviour for commercial purposes. Guest-facing surfaces use the minimum cookies strictly necessary to deliver the service.

---

6. MANAGING YOUR COOKIE PREFERENCES

Browser Settings

All major browsers allow you to view, block, or delete cookies through their settings. Please note that blocking essential cookies may prevent parts of the StayPay platform from functioning correctly.

Browser-specific guidance:

- Google Chrome: support.google.com/chrome/answer/95647

- Mozilla Firefox: support.mozilla.org/kb/enable-and-disable-cookies-website-preferences - Safari: support.apple.com/guide/safari/manage-cookies

- Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge

Cookie Consent

When you first visit usestaypay.com, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time by clearing your cookies and revisiting the site, or by contacting us at privacy@usestaypay.com.

Opting Out of Analytics

If you wish to opt out of aggregated analytics tracking, you can do so by declining analytics cookies via the consent banner, or by using a browser extension such as the Google Analytics Opt-Out Add-On where applicable.

---

7. THIRD-PARTY COOKIES AND SERVICES

Some cookies used on the StayPay platform are set by third-party providers whose services are integrated into the platform. These currently include:

- Stripe — payment processing cookies set when guests interact with add-on payment flows. Stripe's privacy policy is available at stripe.com/privacy.

- Supabase — infrastructure and session management. Supabase's privacy policy is available at supabase.com/privacy.

- Google Places API — used to provide location-based search and recommendations within the guest experience. Google's privacy policy is available at policies.google.com/privacy.

- Analytics providers — anonymised usage analytics (specific provider disclosed in the cookie consent banner).

StayPay is not responsible for the content or practices of third-party cookie policies. We encourage you to review the relevant third-party policies directly.

---

8. COOKIES AND CHILDREN

The StayPay platform is not directed at children under the age of 18. We do not knowingly use cookies to collect data from children. If you believe a child has accessed the platform and data has been collected, please contact us at privacy@usestaypay.com and we will take appropriate steps to address the matter.

---

9. CHANGES TO THIS COOKIE POLICY

We may update this Cookie Policy from time to time to reflect changes to the cookies we use, the third-party providers we work with, or applicable legal requirements. Any material changes will be communicated via our website cookie consent mechanism or by notice to registered users.

The most current version of this Cookie Policy will always be available at usestaypay.com, with the revision date shown at the top of the document.

---

10. CONTACT US

StayPay Ltd Royal Mills, 2 Cotton Street, Manchester, M4 5BZ

Email: privacy@usestaypay.com

Website: usestaypay.com