Cookie policy
Last updated: 20 September 2026
What we store in your browser, why, for how long, and how to change your mind at any time.
What they are and what we actually use
"Cookies" is shorthand for a group of technologies that store information on your device. Reserv barely uses cookies in the strict sense: most of what we store lives in browser local storage. Legally it makes no difference — Article 22(2) of the Spanish LSSI covers both — which is why everything is listed here.
We group them into four categories. Only the first runs without asking you, because without it the service does not work. The other three need your consent and do not run until you give it.
Third-party cookies marked as such are controlled by that third party under its own policy.
1. Strictly necessary
Essential for the application to work. They do not require consent, which is exactly why they are the only ones on by default. They are not used to track you or to advertise.
| Name | What it does | Duration | Party |
|---|---|---|---|
| sb-*-auth-token | Keeps you signed in so you do not have to type your password on every screen. | Until you sign out, or 7 days of inactivity | First party |
| reserv.cookie-consent | Stores your cookie decision, with the date and notice version, so we do not ask again and can evidence what you chose. | 12 months | First party |
| __cf_bm and hosting provider equivalents | Distinguishes human from automated traffic and protects the service against abuse. | 30 minutes | Third party |
2. Preferences
They remember how you like to use the app. If you reject them everything still works: you will just have to pick your language each time.
| Name | What it does | Duration | Party |
|---|---|---|---|
| reserv.lang | Remembers whether you prefer the interface in Spanish or English. | 12 months | First party |
3. Analytics
These would tell us, in aggregate, which parts of the product get used and where people get stuck.
We use no cookies in this category today. If that changes, it will appear here and we will ask you again before switching it on.
4. Marketing and advertising
They measure whether our ads work. They only load on our public marketing site. They never load inside a business's dashboard or on the booking page its clients see: a business's booking page carries no tracking of ours, and that is not configurable.
None of this is downloaded at all unless you accept this category.
| Name | What it does | Duration | Party |
|---|---|---|---|
| _fbp | Meta pixel. Lets us know whether someone who saw our ad on Instagram or Facebook ended up signing up, and adjust where we spend. | 90 days | Third party |
| _fbc | Meta pixel. Links a visit to the specific ad that was clicked. | 90 days | Third party |
Changing or withdrawing your consent
Withdrawing consent has to be as easy as giving it, and here it is: one click on the button below reopens the same panel you saw the first time, with your current choices loaded.
There is no email to write, no form to hunt for and no explanation to give. When you save, the decision applies immediately and any non-essential cookies already set stop being used.
We keep a record of your choice for 3 years — date, notice version and categories accepted — so we can show the Spanish DPA that we asked and what you answered. That record is used for nothing else.
After 12 months we will ask you again, even though the Spanish DPA allows up to 24.
From your browser
You can also delete or block cookies in your browser settings. If you block the strictly necessary ones you will not be able to sign in: that is not a threat, it is how a session works.
The instructions are in each browser's help, under "cookies": Chrome, Safari, Firefox and Edge all keep them in the privacy section.
Changes to this policy
If we add a new cookie in a non-essential category, we will update this table and ask for your consent again before switching it on. We do not treat an earlier consent as covering something that did not exist when you gave it.