Cookie policy

Wisepassenger, a service operated by Bookit Labz LLC, sets strictly necessary cookies (one remembers your language, the others keep you signed in to the dashboard and remember which agency you are working in) and, only if you accept them in the cookie banner, Google Analytics cookies on the public website. Without your acceptance, the Google Analytics tag works without cookies.

Strictly necessary cookies are exempt from consent under Article 5(3) of the ePrivacy Directive (2002/58/EC) and Article 22.2 of Spanish Law 34/2002 (LSSI-CE). Analytics cookies are not: they are set only after you accept, never in the dashboard or on the sign-in pages, and you can withdraw your consent at any time.

NEXT_LOCALE: remembers whether you are reading in English or Spanish, so the site opens in your language. It contains only the language code. It is set when you visit or switch language and is a session cookie, deleted when you close your browser.

Supabase session cookies (named sb-, followed by an identifier of our project, and ending in -auth-token, sometimes split into numbered parts): keep you signed in to the dashboard. They contain the session tokens issued when you sign in, are set only when you sign in, and are removed when you sign out. If you do not sign out they last up to 400 days, and the session they hold can expire earlier. Supabase, Inc. is the provider of our authentication service; the cookies are set on our own domain.

wp-agency: remembers which agency you are working in when your account belongs to more than one. It contains only that agency's internal identifier, is set only for signed-in users, and is a session cookie, deleted when you close your browser.

On the public website we use Google Analytics 4, provided by Google, to count visits and understand which pages are read. The Google Analytics tag loads on the public website with Google's consent mode and, until you accept analytics, with storage denied: it sets no cookie or identifier in your browser and only sends Google cookieless pings (for example, that a page was viewed), which Google uses in aggregate to estimate visits. Advertising permissions are always denied. If you accept, Google Analytics sets two cookies on our domain: _ga, which distinguishes visitors with a random identifier, and _ga_G5MQQ9CZMZ, which keeps the state of the visit. Google sets them to last up to two years.

Google Analytics records the pages you view, how you arrived, your browser and device type and an approximate location derived from your IP address. Google processes this data on our behalf and may process it outside the European Economic Area. The legal basis is your consent (Art. 6(1)(a) GDPR).

To withdraw your consent, open Cookie settings at the foot of any page and choose Reject: the tag goes back to denied storage and its cookies are removed.

wp-sidebar: when you collapse or expand the dashboard's side menu, your choice is saved in your browser's local storage so the menu stays as you left it. It holds only the word open or collapsed, is never sent to us, and stays until you clear your browser's site data.

wp-consent: remembers whether you accepted or rejected analytics cookies, so the banner does not appear on every page. It holds only the word granted or denied, is never sent to us, and stays until you clear your browser's site data or change your choice.

You can delete or block cookies in your browser settings at any time. Blocking the language cookie only means your language choice is not remembered. Blocking the session cookies prevents you from signing in to the dashboard, because they are what keeps you signed in.

You can change your analytics choice at any time from Cookie settings at the foot of the page. For any question about cookies, write to admin@wisepassenger.com.