Cookies policy

A cookie is a small file a website stores on your device. We use cookies to keep you signed in, remember your preferences and — if you allow it — understand how the site is used and show you relevant advertising.

How to manage your preferences

You can accept or reject the optional categories (analytics, marketing) at any time from the banner shown on your first visit, or from the "Change cookie preferences" link in the footer. Strictly necessary cookies do not require consent and cannot be disabled.

Before you decide

We use Google's consent mode. This means the Google tag is present on the page from the start, but with storage denied: until you accept the analytics category, no Google cookie (_ga, _ga_*) is set and no identifier is stored on your device. In that state Google receives only an anonymous, cookieless signal, which it uses to estimate aggregate trends. If you reject, it stays that way; if you accept, the tag begins measuring normally.

Cookies in use

For each cookie: name — category — purpose — duration — provider.

• zonbook_access_token — necessary — authenticated session (JWT) for the booking flow — session — Zonbook (first-party).
• zonbook_cookie_consent — necessary — stores your cookie preferences so we do not re-prompt on every page — 1 year — Zonbook (first-party).
• NEXT_LOCALE — necessary — remembers the language you selected — 1 year — Zonbook (first-party).
• _ga, _ga_* — analytics — Google Analytics 4, measures site usage in aggregate — up to 2 years — Google Ireland Ltd.
• (none today) — marketing — no marketing cookies are currently loaded. Accepting this category grants Google Ads consent signals; cookies only appear here if a Google Ads tag is enabled — — — —.

Self-hosted analytics and session recordings

Alongside Google Analytics we run Umami on our own servers. No visitor data collected by Umami leaves our infrastructure, and none of it is shared with a third party.

Umami's page measurement is cookieless: it stores nothing on your device and uses no identifier, so it needs no consent and does not appear in the inventory above. It records page views, referrer, screen size and page-performance figures, together with events describing how the site is used (the place you searched for and how many filters were applied, an apartment viewed, a booking started) — never free text you typed, and never personal data.

Session recordings and heatmaps are a separate optional category ("Session recordings") and are off unless you turn them on. If you accept them, we record a sampled, masked reconstruction of how a page is used: clicks, scrolling and navigation. All text and form fields are masked in your browser before anything is sent, so the recording carries layout and interaction, not content. Only public pages are recorded: never sign-in, your account, your bookings, payment, check-in or messages. Recordings are kept for 30 days. You can withdraw at any time from "Change cookie preferences" — the page reloads and recording stops immediately.

Update — September 2026: session recordings in the host portal

This section replaces the paragraph on session recordings above, which described the public marketplace only.

On the public marketplace nothing changes: recordings run on public pages only — never on sign-in, your account, your bookings, payment, check-in or messages.

In the host portal, which only signed-in hosts and the people they invite can reach, recordings now cover the whole portal, including pages that display reservations, guest details and messages. Sign-in, password and identity-verification pages are never recorded. If you are a host, this means a recording of your session can include your guests' information as it appears on your screen. All text and form fields are masked in your browser before anything is sent, so the recording carries layout and interaction rather than content.

The "Session recordings" option is pre-selected in the cookie preferences dialog. You can switch it off before saving, choose "Reject all", or change your choice at any time from "Change cookie preferences" — the page reloads and recording stops immediately. Recordings are kept for 30 days.