What cookies and browser storage are

Cookies are small values stored by a browser and sent with certain requests. Local storage keeps limited preferences on the device. HostelSpace uses both only where needed for current platform features.

Essential authentication cookie

When you sign in, the API stores a protected refresh-token cookie. It is HTTP-only, so normal browser scripts cannot read it. It supports secure session renewal, logout and session revocation.

• Purpose: authentication and account security.
• Type: essential; HostelSpace cannot keep an account signed in without it.
• Duration: limited by the configured session lifetime or removed/revoked when you log out, change your password or the session expires.

Local browser storage

• Session marker: remembers that the browser should attempt to restore an authenticated session; it does not contain the password or refresh token.
• Theme preference: remembers light or dark appearance.
• Hostel comparison: stores the small set of selected hostel identifiers and names so selections survive navigation or reload.
• Interface preferences may be stored when required to make a feature work consistently.

Privacy-friendly analytics

HostelSpace uses Vercel Web Analytics and Speed Insights to understand anonymous page usage and website performance. These services are configured without advertising profiles or cross-site tracking cookies. We do not currently use advertising cookies in the HostelSpace MVP.

Managing storage

You can clear cookies and local storage through browser settings. Blocking essential cookies will prevent login and account features from working correctly. Clearing comparison or theme storage resets those preferences only.

Updates and contact

This policy may change when new platform features are introduced. Questions about cookies or browser storage can be sent to support@hostelspace.pk.