Cookie Policy
This Cookie Policy explains what cookies and similar tracking technologies are used on BookInstead.com, why we use them, what data they collect, and how you can control or opt out of non-essential tracking. It applies to all visitors and registered users of the Platform and is incorporated by reference into the BookInstead Privacy Policy and Terms of Service.
Quick Reference
The table below summarizes the four cookie categories used on BookInstead.com. Full details for each category — including specific cookies, providers, and retention durations — are provided in Section 5.
| Category | Can Be Disabled? | Purpose | Legal Basis |
|---|---|---|---|
| Strictly Necessary | No — required for core functionality | Login sessions, booking flow, security, payment processing | Legitimate Interest / Contract Performance |
| Functional | Yes — via Cookie Banner | Remember your preferences, language, and login state | Consent |
| Analytics / Performance | Yes — via Cookie Banner | Understand how users navigate the Platform so we can improve it | Consent |
| Marketing / Advertising | Yes — via Cookie Banner | Deliver relevant ads, retargeting, and measure ad campaign effectiveness | Consent |
You can manage your cookie preferences at any time by clicking “Cookie Preferences” in the footer of BookInstead.com.
1. Introduction and Scope
1.1 Who We Are
BookInstead LLC (“BookInstead,” “we,” “us,” or “our”) operates the BookInstead.com online marketplace. This Cookie Policy applies to all pages and services available at BookInstead.com, any BookInstead mobile applications, and any other digital touchpoints operated by BookInstead that link to this Policy.
1.2 What This Policy Covers
This Policy covers:
- Cookies set directly by BookInstead (“first-party cookies”).
- Cookies and tracking technologies set by third parties on BookInstead’s behalf, including analytics providers, advertising platforms, and payment processors (“third-party cookies”).
- Other tracking technologies that function similarly to cookies, including web beacons, pixel tags, local storage objects, session storage, fingerprinting scripts, and SDKs embedded in mobile applications.
1.3 Relationship to Privacy Policy
This Cookie Policy is a supplement to and incorporated into BookInstead’s Privacy Policy. Information collected through cookies is handled in accordance with the Privacy Policy. If there is any conflict between this Cookie Policy and the Privacy Policy regarding the treatment of cookie-collected data, the Privacy Policy controls.
1.4 Updates to This Policy
BookInstead may update this Cookie Policy at any time to reflect new cookies, changes in third-party providers, legal requirements, or platform updates. Material changes will be communicated via an updated Cookie Consent Banner presented to all users upon their next visit, and via email to registered users at least seven (7) calendar days before taking effect. The “Last Reviewed” date at the top of this document will be updated with each revision.
2. What Are Cookies and How Do They Work
2.1 Cookies Defined
Cookies are small text files that a website places on your computer, tablet, smartphone, or other device when you visit it. They are stored in your browser’s local storage and sent back to the originating website — or to a third party — on subsequent visits. Cookies allow websites to recognize your device, remember your preferences, and track your interactions over time.
Cookies are a foundational technology of the modern web. Without them, many essential website functions — including logging in, maintaining a shopping cart, and processing secure transactions — would not work.
2.2 Types of Cookies by Duration
| Duration Type | Description |
|---|---|
| Session Cookies | Temporary cookies that exist only for the duration of your browser session. They are automatically deleted when you close your browser. Used for login state, booking flow continuity, and security tokens. |
| Persistent Cookies | Cookies that remain on your device for a defined period after your browser session ends, or until you manually delete them. Used for remembering preferences, recognizing returning users, and analytics. |
2.3 Types of Cookies by Origin
| Origin Type | Description |
|---|---|
| First-Party Cookies | Set directly by BookInstead.com on your device. These cookies are only accessible by BookInstead and are used for core platform functionality, user preferences, and performance monitoring. |
| Third-Party Cookies | Set by external service providers whose code or content is embedded on BookInstead.com. These include analytics providers, advertising platforms, payment processors, and social media platforms. Third-party cookies may be used across multiple websites to build a profile of your online behavior. |
2.4 Similar Tracking Technologies
In addition to traditional cookies, BookInstead and its third-party partners may use the following tracking technologies, which are subject to the same consent and opt-out rules as cookies:
| Technology | Description |
|---|---|
| Web Beacons (Pixel Tags) | Tiny, transparent 1×1 pixel images embedded in web pages or emails. When loaded, they confirm that a page was viewed or an email was opened and may transmit your IP address and browser information to a third party. |
| Local Storage | A browser-based storage mechanism (similar to cookies but with a larger capacity) used to store data on your device. Unlike cookies, local storage data is not sent automatically with every HTTP request. |
| Session Storage | A temporary, browser-session-scoped storage mechanism cleared when the browser tab is closed. Used for booking flow continuity and form state preservation. |
| Device Fingerprinting | A technique that identifies your device by combining non-personally identifiable attributes such as browser type, OS version, screen resolution, installed fonts, and time zone. Used primarily for fraud detection and security purposes. |
| SDKs (Mobile Applications) | Software Development Kits embedded in mobile applications that collect device information, usage data, and crash reports. Subject to the same consent requirements as cookies in mobile contexts. |
| UTM Parameters | Query string parameters appended to URLs (e.g., ?utm_source=google) that identify the source, medium, and campaign that directed a user to the Platform. Not stored on your device but logged by our analytics systems. |
3. Why We Use Cookies
BookInstead uses cookies and tracking technologies for four primary purposes. Each purpose is associated with a cookie category that is governed by different consent and opt-out rules:
3.1 Strictly Necessary
These cookies are essential for BookInstead.com to function. Without them, you cannot log in, maintain a session, complete a booking, or process a payment. They do not collect information that could be used for marketing and cannot be disabled through the Cookie Banner.
Strictly necessary cookies include:
- Authentication tokens that keep you logged into your account during a session.
- Session identifiers that maintain your booking flow state across multiple checkout steps.
- CSRF (Cross-Site Request Forgery) protection tokens that prevent malicious form submissions.
- Load balancer cookies that ensure consistent server routing during your session.
- Payment security tokens passed between BookInstead and the payment processor during checkout.
- Cookie consent records that store your cookie preference selections.
Legal basis: Legitimate interest (ensuring the security and functionality of the Platform) and contract performance (enabling users to complete bookings they have initiated). EU/UK users: these cookies fall under the “technical storage strictly necessary” exemption in the ePrivacy Directive.
3.2 Functional
Functional cookies allow the Platform to remember choices you make and provide a more personalized experience. They do not track your activity across other websites and are not used for advertising. Examples include:
- Remembering your preferred language or region settings.
- Saving your search filters and sort preferences between sessions.
- Keeping you logged in across browser sessions if you select “Remember Me.”
- Storing your currency display preference.
- Remembering your last-viewed Listings to surface recently browsed content.
Legal basis: Consent. These cookies are enabled by default but can be disabled through the Cookie Banner without affecting your ability to use core Platform features.
3.3 Analytics and Performance
Analytics cookies help BookInstead understand how visitors use the Platform so we can identify performance issues, measure the effectiveness of features, and improve the user experience. These cookies collect information about:
- Which pages and Listings you visit, in what order, and for how long.
- How you arrived at BookInstead.com (search engine, direct link, referral, etc.).
- Where you drop off during the booking flow.
- Error messages you encounter.
- Device type, browser, and operating system used.
- Aggregate traffic patterns, peak usage times, and geographic distribution of visitors.
Analytics cookies do not collect your name, email address, payment information, or any other directly personally identifiable information. Data is aggregated and anonymized wherever possible. Where individual-level session data is collected, it is not shared with third parties for their independent use.
Legal basis: Consent. These cookies require your permission before activation. You may opt out at any time without affecting your ability to use the Platform.
3.4 Marketing and Advertising
Marketing cookies are used to deliver relevant advertisements to you on BookInstead.com and on other websites you visit after leaving the Platform. They also allow us to measure the effectiveness of our advertising campaigns. These cookies may:
- Track your visits to BookInstead.com and the Listings you viewed, to display retargeted ads on platforms such as Google, Meta (Facebook/Instagram), and others.
- Build a profile of your interests based on your browsing behavior across multiple websites.
- Limit the number of times you see the same advertisement.
- Measure click-through and conversion rates from advertising campaigns.
- Enable social media platforms to connect your BookInstead activity with your social media profile for ad targeting purposes, if you are logged into those platforms.
Marketing cookies involve sharing certain data (such as hashed email addresses or behavioral signals) with advertising partners including Meta and Google. This sharing is governed by those platforms’ own privacy policies. BookInstead does not sell your personal information to advertisers, but advertising partners may use shared signals to build their own audience profiles.
Legal basis: Consent. Marketing cookies are disabled by default for new visitors. They are activated only after you explicitly accept them through the Cookie Banner. You may withdraw consent at any time.
4. Third-Party Cookies and Services
4.1 Third-Party Providers
BookInstead embeds code from the following categories of third-party providers on the Platform. Each provider sets its own cookies according to its own privacy policy. By accepting the relevant cookie categories in the Cookie Banner, you also consent to the data practices of the third-party providers in those categories, as described in their privacy policies.
| Provider | Category | Primary Purpose | Data Shared | Opt-Out |
|---|---|---|---|---|
| Google Analytics (GA4) | Analytics | Page views, user journeys, traffic sources, conversion tracking | Anonymized behavioral data, device info, IP (truncated) | Yes |
| Google Ads / Google Tag Manager | Marketing | Ad conversion tracking, remarketing audiences | Behavioral signals, hashed email (if logged in) | Yes |
| Meta Pixel (Facebook/Instagram) | Marketing | Ad conversion tracking, custom audiences, retargeting | Page views, events, hashed email (if logged in) | Yes |
| Hotjar (or equivalent) | Analytics | Heatmaps, session recordings, scroll depth analysis | Anonymized behavioral data, mouse movements | Yes |
| Stripe / Payment Processor | Strictly Necessary | Payment fraud detection, transaction processing | Payment session data, device fingerprint for fraud prevention | No |
| Intercom / Support Chat | Functional | In-app customer support chat widget | Account info, conversation history | Yes |
| Google Maps | Functional | Displaying Experience meeting locations on maps | Location queries, device IP | Yes |
| YouTube (video embeds) | Functional | Displaying Operator Experience videos | Video interaction data, IP address (if video is played) | Yes |
The list above reflects BookInstead’s current third-party integrations and will be updated as providers are added, changed, or removed. BookInstead is not responsible for the independent data practices of third-party providers beyond what is disclosed in this Policy.
4.2 Social Media Buttons and Widgets
BookInstead may display social media sharing buttons, embedded feeds, or follow widgets from platforms including Facebook, Instagram, Twitter/X, Pinterest, and LinkedIn. These widgets may set cookies or collect data about your interactions with the widget, even if you do not click on them, if you are currently logged into the relevant social media platform. BookInstead does not control the data collected by these widgets, which is governed by each platform’s own privacy policy.
5. Complete Cookie Inventory
The following tables provide a complete inventory of the cookies currently in use on BookInstead.com, organized by category. This inventory is reviewed and updated quarterly. Last updated: March 2025.
Category 1: Strictly Necessary Cookies
| Category | Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|---|
| Strictly Necessary | bi_session | BookInstead | Maintains authenticated user session. Required for login and booking flow. | Session | Browser session |
| Strictly Necessary | bi_csrf | BookInstead | CSRF token preventing cross-site request forgery attacks on forms and checkout. | Session | Browser session |
| Strictly Necessary | bi_auth_token | BookInstead | Encrypted authentication token enabling persistent login if Remember Me is selected. | Persistent | 30 days |
| Strictly Necessary | bi_booking_state | BookInstead | Preserves booking flow progress (selected Experience, date, party size) across checkout steps. | Session | Browser session |
| Strictly Necessary | bi_cookie_consent | BookInstead | Stores your cookie consent preferences to avoid re-displaying the banner on every visit. | Persistent | 12 months |
| Strictly Necessary | __stripe_mid | Stripe | Fraud prevention cookie used by Stripe payment processor to identify devices across sessions. | Persistent | 12 months |
| Strictly Necessary | __stripe_sid | Stripe | Session fraud detection cookie used by Stripe during active payment processing. | Session | 30 minutes |
| Strictly Necessary | bi_load_balancer | BookInstead | Ensures consistent server routing during your session to prevent session loss. | Session | Browser session |
Category 2: Functional Cookies
| Category | Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|---|
| Functional | bi_lang_pref | BookInstead | Stores your language/region preference so it is applied on return visits. | Persistent | 12 months |
| Functional | bi_currency | BookInstead | Remembers your selected display currency preference. | Persistent | 12 months |
| Functional | bi_search_filters | BookInstead | Saves your most recent search filters (location, date, category) for convenience. | Persistent | 7 days |
| Functional | bi_recently_viewed | BookInstead | Tracks Listings you have recently viewed to surface them in the “Recently Viewed” section. | Persistent | 30 days |
| Functional | intercom-session-* | Intercom | Maintains your customer support chat session, including conversation history. | Persistent | 7 days |
| Functional | intercom-id-* | Intercom | Identifies you as a returning support user across sessions for continuity. | Persistent | 9 months |
| Functional | CONSENT | Google Maps | Stores consent to display Google Maps embedded content on Listing pages. | Persistent | 2 years |
| Functional | YSC | YouTube | Unique identifier for YouTube video sessions embedded on Operator Listings. | Session | Browser session |
| Functional | VISITOR_INFO1_LIVE | YouTube | Estimates bandwidth to optimize video streaming quality for embedded videos. | Persistent | 6 months |
Category 3: Analytics and Performance Cookies
| Category | Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|---|
| Analytics | _ga | Google Analytics | Distinguishes unique users by assigning a randomly generated client ID. Core GA4 tracking cookie. | Persistent | 13 months |
| Analytics | _ga_[ID] | Google Analytics | Persists session state and records campaign data for GA4 property reporting. | Persistent | 13 months |
| Analytics | _gid | Google Analytics | Distinguishes users across sessions within a 24-hour window. | Persistent | 24 hours |
| Analytics | _gat | Google Analytics | Throttles GA request rate to prevent server overload during high traffic periods. | Session | 1 minute |
| Analytics | _hjSessionUser_* | Hotjar | Assigns a unique ID to a user on first visit. Ensures behavioral data is attributed correctly across sessions. | Persistent | 12 months |
| Analytics | _hjSession_* | Hotjar | Holds current session data, including scroll depth, clicks, and heatmap interactions. | Session | 30 minutes |
| Analytics | _hjFirstSeen | Hotjar | Identifies whether this is a user’s first visit, used to track new vs. returning user behavior. | Session | Browser session |
| Analytics | _hjAbsoluteSessionInProgress | Hotjar | Detects first pageview of a session for accurate session-start counting. | Session | 30 minutes |
| Analytics | bi_perf_* | BookInstead | Internal performance tracking cookie measuring page load times and API response latency. | Session | Browser session |
Category 4: Marketing and Advertising Cookies
| Category | Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|---|
| Marketing | _fbp | Meta (Facebook) | Identifies browsers for delivery and measurement of Facebook and Instagram ad campaigns. | Persistent | 3 months |
| Marketing | _fbc | Meta (Facebook) | Stores Facebook click ID (fbc) from ad click URLs to attribute conversions to ad campaigns. | Persistent | 3 months |
| Marketing | fr | Meta (Facebook) | Delivers and measures Facebook ad targeting by identifying users across Meta’s ad network. | Persistent | 3 months |
| Marketing | _gcl_au | Google Ads | Used by Google AdSense to test the efficiency of advertising on websites using its services. | Persistent | 3 months |
| Marketing | _gcl_aw | Google Ads | Stores Google Ads click ID (gclid) from ad click URLs to attribute conversions. | Persistent | 90 days |
| Marketing | IDE | Google DoubleClick | Used by Google to register and report user actions after viewing or clicking a Google ad. | Persistent | 13 months |
| Marketing | NID | Registers a unique ID that Google uses to remember user preferences and personalize search ads. | Persistent | 6 months | |
| Marketing | bi_campaign_ref | BookInstead | Internal cookie tracking which marketing campaign, email, or referral source brought you to BookInstead.com. | Persistent | 30 days |
Marketing cookies (Category 4) are disabled by default for all new visitors. They are activated only after you explicitly consent via the Cookie Banner. Disabling marketing cookies does not stop all advertising — it means ads you see may be less relevant to your interests.
6. Cookie Consent and the Cookie Banner
6.1 How We Obtain Consent
When you first visit BookInstead.com, you will be presented with a Cookie Consent Banner. The Banner:
- Identifies the four cookie categories used on the Platform.
- Defaults to Strictly Necessary cookies only being active before any selection is made.
- Presents clear Accept All, Reject All, and Customize options.
- Links to this full Cookie Policy for users who want more detail before deciding.
- Records your consent selection with a timestamp and stores it in the bi_cookie_consent cookie for 12 months.
Clicking “Accept All” activates all four cookie categories. Clicking “Reject All” deactivates all non-essential cookies (Functional, Analytics, and Marketing). Clicking “Customize” opens a panel where you can toggle each category independently.
6.2 Consent for Registered Users
Registered users who are logged into their BookInstead account will have their cookie preferences stored in their account profile in addition to the browser cookie. This ensures that your preferences are applied consistently across devices when you are logged in. You may update your preferences at any time through your account settings under “Privacy Preferences.”
6.3 Consent for Unregistered Visitors
For visitors who are not logged in, cookie consent is stored solely in the browser cookie (bi_cookie_consent). If you clear your browser cookies, your consent preferences will be reset and the Cookie Banner will reappear on your next visit.
6.4 Withdrawing Consent
You may withdraw or change your cookie consent at any time using any of the following methods:
- Click the “Cookie Preferences” link in the footer of any BookInstead.com page to reopen the Cookie Banner and update your selections.
- Visit your account settings at bookinstead.com/account/privacy-preferences (registered users only).
- Use your browser’s built-in cookie management tools to delete specific cookies or block all cookies from BookInstead.com.
- Use your device’s advertising settings to limit mobile advertising identifier tracking.
Withdrawing consent takes effect immediately for future tracking. It does not retroactively delete data already collected during the period when consent was active. If you want previously collected data deleted, you must submit a data deletion request as described in the Privacy Policy.
7. Browser-Level Cookie Controls
7.1 Managing Cookies in Your Browser
All modern browsers allow you to view, block, and delete cookies through browser settings. The steps vary by browser. The links below direct you to the official cookie management instructions for major browsers:
| Browser | Cookie Management Instructions URL |
|---|---|
| Google Chrome | support.google.com/chrome/answer/95647 |
| Mozilla Firefox | support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer |
| Apple Safari (desktop) | support.apple.com/guide/safari/manage-cookies-sfri11471 |
| Apple Safari (iOS) | support.apple.com/en-us/HT201265 |
| Microsoft Edge | support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge |
| Opera | help.opera.com/en/latest/web-preferences/#cookies |
| Android (Chrome) | support.google.com/chrome/answer/95647 (select Android tab) |
Blocking all cookies at the browser level, including Strictly Necessary cookies, will prevent you from logging in to BookInstead, completing a booking, or processing a payment. We recommend using the Cookie Banner or account preferences to manage non-essential cookies rather than blocking all cookies in your browser.
7.2 Opt-Out Tools for Advertising Networks
If you want to opt out of interest-based advertising from specific ad networks, you can use the following industry opt-out tools:
- Google: myaccount.google.com/data-and-privacy (Ad settings) or tools.google.com/dlpage/gaoptout (Google Analytics opt-out browser add-on).
- Meta (Facebook/Instagram): facebook.com/settings > Ads > Ad preferences.
- Network Advertising Initiative (NAI): optout.networkadvertising.org — opt out of NAI member advertising networks.
- Digital Advertising Alliance (DAA): optout.aboutads.info — opt out of DAA member advertising networks.
- European Interactive Digital Advertising Alliance (EDAA): youronlinechoices.eu — for EU/UK users.
These opt-out tools are operated by third parties and their availability and effectiveness are outside BookInstead’s control. Using these tools opts you out of interest-based ad targeting but does not stop ads from being displayed — ads will simply be less personalized.
8. International Users and Applicable Law
8.1 United States Users
The United States does not currently have a single federal cookie law. However, several states — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) — have enacted comprehensive privacy laws that include cookie-related obligations. BookInstead’s Cookie Banner and consent mechanisms are designed to comply with the requirements of these state laws, including the right to opt out of the sale of personal information and the right to opt out of targeted advertising.
8.2 European Economic Area (EEA) and United Kingdom Users
For users accessing BookInstead.com from the European Economic Area or United Kingdom, the following additional rules apply:
- We obtain affirmative, freely given, specific, informed, and unambiguous consent before setting any non-essential cookies, in accordance with the ePrivacy Directive (EU Cookie Law) and the UK Privacy and Electronic Communications Regulations (PECR).
- Strictly Necessary cookies are exempt from consent requirements under the ePrivacy Directive.
- You have the right to withdraw consent at any time without detriment, as described in Section 6.4.
- We do not use pre-ticked boxes or bundled consent. Each cookie category requires an independent, affirmative action to enable.
- Consent records are maintained with timestamps and your selection details, and are available upon request.
If you are an EEA or UK resident and believe your cookie rights have been violated, you may lodge a complaint with your local data protection authority.
8.3 Other Jurisdictions
BookInstead applies its consent-based cookie framework globally, regardless of whether a user’s jurisdiction mandates it. Where local law requires more stringent standards than those described in this Policy, the more stringent standard applies.
9. Do Not Track
Some web browsers include a “Do Not Track” (DNT) signal that can be enabled in browser settings to communicate to websites that you do not wish to be tracked across websites. As of the date of this Policy, there is no universally accepted technical standard for how websites should respond to DNT signals.
BookInstead does not currently alter its data collection or tracking practices in response to DNT signals. We will reassess this position if and when an industry consensus or legal standard for DNT response is established. In the meantime, you can use the Cookie Banner, your account privacy settings, and the browser and advertising opt-out tools described in Sections 6 and 7 to exercise control over the tracking technologies used on BookInstead.com.
10. Data Collected Through Cookies and How It Is Used
10.1 Types of Data Collected
Cookies and similar tracking technologies collect the following categories of data when you use BookInstead.com:
| Data Type | Examples | Cookie Categories That Collect It |
|---|---|---|
| Device and browser identifiers | IP address (full or truncated), browser type, OS version, screen resolution | All categories |
| Session and navigation data | Pages visited, time on page, scroll depth, clicks, booking flow steps | Strictly Necessary, Analytics |
| Authentication data | Encrypted session tokens, login state | Strictly Necessary only |
| User preferences | Language, currency, saved filters, recently viewed listings | Functional only |
| Ad interaction data | Ad clicks, impressions, conversions attributed to ad campaigns | Marketing only |
| Cross-site behavioral data | Pages visited on other websites, interest profile data | Marketing only (via third-party cookies) |
| Hashed personal data | Hashed email address for ad audience matching (e.g., Meta Custom Audiences) | Marketing only (with consent) |
| Payment fraud signals | Device fingerprint, IP reputation, payment behavior patterns | Strictly Necessary (Stripe) only |
10.2 Retention of Cookie-Collected Data
Data collected through cookies is retained in accordance with the periods described in the Cookie Inventory (Section 5) and the data retention schedule in the BookInstead Privacy Policy. When a cookie expires, it is deleted from your browser automatically. Data stored in BookInstead’s servers that was collected via cookies is subject to the retention periods in the Privacy Policy and may persist beyond the cookie’s browser expiration.
If you request deletion of your personal data under the Privacy Policy, BookInstead will also delete server-side data attributable to your account that was collected through cookies, to the extent technically feasible.
11. Contact Information
For questions about this Cookie Policy, to request a copy of your cookie consent record, or to report a concern about tracking practices on BookInstead.com:
Privacy and Cookie Inquiries: privacy@bookinstead.com
General Support: support@bookinstead.com
Legal Notices: legal@bookinstead.com
Cookie Preferences (self-service): bookinstead.com/cookie-preferences
Account Privacy Settings: bookinstead.com/account/privacy-preferences
Website: www.bookinstead.com
Response Time: Cookie and privacy inquiries are responded to within 5 business days.