Cookie Policy

sb-*-auth-token

Your Supabase sign-in session (an encrypted token, split across a few cookies). Set when you sign in, refreshed automatically, removed when you sign out. Lifetime: until sign-out or 7 days of inactivity. Strictly necessary.

__vercel_*

Set by our hosting provider only on preview deployments to protect them with a password. Not used on the public site.

Some conveniences (for example which dashboard tab you last opened) may be remembered in your browser's local storage. This never leaves your device and can be cleared from your browser settings at any time.

Card payments are rendered by Stripe inside the payment step. Stripe may set its own cookies for fraud prevention while that form is on screen; see Stripe's cookie policy. We embed no analytics, social-media or advertising scripts.

You can block or delete cookies in your browser. Blocking the session cookie means you cannot stay signed in. Questions: privacy@semesterstay.eu · see also the Privacy Policy.