Cookie Policy
Version 2026-09-19 · effective 19 September 2026
Summary
This summary helps you find your way. It does not replace the full policy below.
- We use only the cookies and storage our websites need to work, plus privacy-friendly analytics if you agree.
- We use no advertising cookies, no Meta Pixel, no Google Analytics and no cross-site tracking.
- Our banner gives "Accept all" and "Decline non-essential" equal weight, and every optional switch starts off.
- If your browser sends Global Privacy Control, we decline non-essential cookies for you automatically, without showing the banner.
- You can change your mind at any time with the "Cookie preferences" link.
- Our apps use no advertising IDs and do not track you across other companies' apps.
1. Who we are
This policy is issued by the Stayantra companies, [Pending: UK company legal name] and [Pending: Nepal Stayantra company legal name], who operate stayantra.com, the Stayantra marketplace at marketplace.stayantra.com, docs.stayantra.com, the hotel system at app.stayantra.com, hotel websites built on Stayantra, and the Stayantra Go and Stayantra Connect apps. It explains the cookies and similar technologies we use. Read it with our Privacy Policy, which explains how we handle personal data in general.
2. What cookies and similar technologies are
- Cookies are small text files a website stores in your browser. They let the site remember you between pages or visits.
- Local storage and session storage are places in your browser where a website can keep information. Local storage lasts until it is cleared; session storage disappears when you close the tab.
- SDKs (software development kits) are pieces of code from other companies built into an app, for example to deliver push notifications or report crashes.
- Secure storage on your phone is an encrypted area the operating system provides for sensitive items, such as sign-in tokens.
We call all of these "cookies" in this policy, unless the difference matters.
First-party cookies are set by us. Third-party cookies are set by another company whose content appears on our pages. Session cookies are deleted when you close your browser; persistent cookies last for a set time.
3. The law we follow
In the UK and the EU, the Privacy and Electronic Communications Regulations and the ePrivacy Directive allow us to store or read information on your device without your consent only when it is strictly necessary to provide a service you asked for. Everything else needs your consent first. We apply this standard to everyone, wherever you are.
4. The cookies and storage we use
4.1 Strictly necessary
These are needed for the site or app to work, keep your account secure, or remember a choice you made. They do not need consent, and you cannot switch them off in the banner. You can block them in your browser, but parts of Stayantra will then stop working.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sy_consent | Stayantra (first party) | Remembers your cookie choices, and whether they came from you or from a Global Privacy Control signal | Cookie | 6 months |
| Stayantra_access_token | Stayantra | Keeps you signed in to the marketplace | Cookie, secure, not readable by scripts | 1 hour |
| Stayantra_refresh_token | Stayantra | Renews your marketplace sign-in without asking for your password again | Cookie, secure, not readable by scripts | 7 days, or 14 days if you choose to stay signed in |
| Stayantra_token | Stayantra | Keeps hotel owners and staff signed in to the hotel dashboard | Cookie, secure, not readable by scripts | 15 minutes |
| Stayantra_refresh | Stayantra | Renews the dashboard sign-in | Cookie, secure, not readable by scripts | Until you close the browser, or 14 days if you choose to stay signed in |
| oauth_state | Stayantra | Protects Google sign-in against forged requests | Cookie | 15 minutes |
| oauth_code_verifier | Stayantra | Completes Google sign-in securely | Cookie | 15 minutes |
| oauth_redirect | Stayantra | Returns you to the page you were on after signing in | Cookie | 15 minutes |
| stayantra_hotel_ref | Stayantra | Records which hotel referred a new hotel that signs up, so both receive the referral reward they asked for | Cookie | 30 days |
| stayantra_ref | Stayantra | Records a guest referral code from a link you followed, so the referral reward you asked for can be applied when you register | Cookie and local storage | 30 days |
| stayantra-concierge-chat-v1 | Stayantra | Keeps your chat with Exubee on the marketplace after a page refresh | Local storage | Until you start a new chat or clear your browser data |
| Booking in progress | Stayantra | Keeps the details of a booking you are making if you refresh the page | Session storage | Until you close the tab |
| stayantra.featured-city | Stayantra | Remembers the city you chose for featured hotels | Local storage | Until you change it or clear your browser data |
| stayantra_profile_nudge_dismissed_v1 | Stayantra | Remembers that you dismissed a prompt to complete your profile | Local storage | Until you clear your browser data |
| sy-region | Stayantra | Remembers the region and currency you chose on stayantra.com | Local storage | Until you change it or clear your browser data |
| sy_maps_opt_in | Stayantra | Remembers that you chose "Show map", so Google maps load without asking again in this tab | Session storage | Until you close the tab |
We also keep a record on our servers of the choice you made in the banner and the policy version it was made under, so that we can show we asked for consent properly.
Error monitoring. Our marketplace and dashboard include Sentry's error-reporting code, which reports crashes and errors so we can fix them. It sets no cookies, does not record your session, and is configured not to send personal data such as IP addresses. We rely on our legitimate interest in running a secure, working service for this.
4.2 Analytics (only with your consent)
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Vercel Web Analytics | Vercel Inc. (United States) | Counts page views and visits so we can see which pages are useful | No cookies; aggregate data only | Not stored on your device |
| Vercel Speed Insights | Vercel Inc. (United States) | Measures how fast our pages load for real visitors | No cookies; aggregate data only | Not stored on your device |
These tools do not use cookies and do not build a profile of you. We still load them only after you switch on analytics, because they read information from your browser.
4.3 Marketing and advertising
We use none. There are no advertising cookies, no Meta Pixel, no Google Analytics, no retargeting and no cross-site tracking on Stayantra's own websites. The banner shows a marketing switch so that we can ask properly if this ever changes; it stays off, and nothing uses it today. If we ever add a marketing technology, we will update this policy and ask for your consent first.
We do not sell or share personal data for cross-context behavioural advertising. See https://marketplace.stayantra.com/do-not-sell.
5. Third-party content
Google Maps. Some marketplace and hotel pages show a map from Google Maps. On the marketplace and hotel websites the map does not load until you press "Show map". When it loads, Google receives your IP address and may set its own cookies, under Google's privacy policy. If you do not want this, do not press "Show map"; you can still see a hotel's address as text.
Check-in QR codes. Your check-in QR code is drawn on our own servers. No outside service receives your check-in token.
Documentation site. docs.stayantra.com loads some scripts from the jsDelivr content delivery network, which receives your IP address to deliver the file.
Payment pages. When you pay, you move to pages run by Stripe, eSewa, Khalti or Fonepay. They set their own cookies, needed for security and fraud prevention, under their own policies.
Hotel websites. Hotel websites built on Stayantra use the same consent banner and the same strictly necessary cookies. Our template includes no analytics. If a hotel adds its own tools to its website, the hotel is responsible for them and must ask for your consent through the banner.
6. The consent banner
When you first visit stayantra.com, the marketplace or a hotel website, we show a banner. It:
- offers "Accept all" and "Decline non-essential" as equally prominent choices;
- lets you choose categories one by one, with every optional switch off until you turn it on;
- sets no non-essential cookies and loads no analytics until you choose;
- stores your choice in the sy_consent cookie for 6 months, after which we ask again.
If we change this policy in a way that affects your choices, we ask again even before the 6 months are up.
7. Global Privacy Control
Global Privacy Control (GPC) is a setting in some browsers and extensions that tells websites you do not want your data sold or shared. If your browser sends a GPC signal, we treat it as a valid opt-out: we store a "declined" choice for all non-essential categories automatically and do not show you the banner. We record that the choice came from GPC, not from you clicking a button.
There is no common standard for responding to browser "Do Not Track" signals, so we do not respond to them. We honour GPC instead.
8. How to change your choice
- On stayantra.com and hotel websites: use the "Cookie preferences" link in the site footer. It reopens the banner so you can change your choice.
- On the marketplace: use the "Cookie preferences" link in the footer, or "Change cookie preferences" at https://marketplace.stayantra.com/do-not-sell.
- In your browser: you can delete cookies and site data, and block cookies, in your browser's settings. Blocking strictly necessary cookies will stop sign-in and booking from working.
Withdrawing consent stops analytics from loading on your next page. It does not affect what happened before.
9. Mobile apps
Stayantra Go (for guests) and Stayantra Connect (for hotel staff) do not use browser cookies, but they do store some information on your phone:
- Secure storage. Your sign-in tokens are kept in your phone's encrypted secure storage (Keychain on iOS, Keystore on Android).
- App storage. Settings such as language and recent choices are kept on your phone so the app works offline and remembers you.
- Push notification tokens. If you allow notifications, Apple Push Notification service or Google Firebase Cloud Messaging gives your device a token, which we store on our servers to send you notifications. Turn notifications off in your phone's settings at any time.
- Crash reporting. The apps use Sentry to report crashes, without personal data.
- App updates. The apps check with Expo's update service for new versions, which receives your IP address and the app version.
- Face ID or fingerprint. If you turn on biometric unlock, the check happens entirely on your phone. We never receive your biometric data.
No tracking. The apps use no advertising identifiers (no IDFA on iOS, no Android advertising ID), contain no advertising SDKs, and do not track you across apps and websites owned by other companies. On iOS, our privacy declaration states that the app does not track.
Location. The apps ask for your location only when you choose a "near me" search. The coordinates are rounded, used to find nearby hotels, and not stored in your profile. You can turn location off in your phone's settings.
10. Changes to this policy
We update this policy when we change the technologies we use. The date at the top shows the version in force. If a change affects your choices, the banner will ask you again.
11. Contact
Questions about cookies or this policy: email info@stayantra.com.
Related documents: Privacy Policy, Sub-processors.