Strictly necessary
These keep the product working — signing you in, processing payments, remembering your cookie choice. They are set automatically without consent because the law allows it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token (localStorage) | Lovable Cloud (Supabase) | Holds your authenticated session JWT so you stay signed in across reloads. | Until sign-out or 1 hour token TTL (auto-refreshed) |
| rk24.cookie-consent.v1 (localStorage) | Roomkey24 | Remembers your cookie banner choice so we don't ask again. | 12 months |
| __stripe_mid, __stripe_sid, m | Stripe (only on /checkout and /pricing) | Fraud prevention, payment session, device fingerprinting for chargeback protection. | Session up to 1 year |
| G_AUTHUSER_*, NID, SID (third-party) | Google (only when you use Sign in with Google) | Required by Google to authenticate you and return the OAuth token to us. | Up to 2 years (Google-controlled) |
Non-essential
These would only be set after you click Accept all in the banner. You can revoke consent at any time by clearing your browser's site data for suite.roomkey24.com.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| (none yet) | Roomkey24 analytics | We do not currently run a non-essential analytics cookie. If we add one, it will only fire after you accept in the banner. | — |
Managing your choice
Your cookie choice is stored in rk24.cookie-consent.v1 in localStorage. To change it: clear site data in your browser settings forsuite.roomkey24.com and reload — the banner will reappear.
Third-party cookies on payment pages
When you reach the Stripe-hosted checkout, Stripe sets its own cookies under js.stripe.com for fraud prevention. These are strictly necessary to take payment and are not optional. See Stripe's cookie notice for details.
Google sign-in cookies
If you choose Continue with Google, Google sets its own session cookies on its own domains while authenticating you. These are governed by Google's privacy policy.