Cookie Policy
Which cookies and similar technologies the Rahlio website and app use, why, and how to control them. In short: one cookie for your language, no advertising cookies, no third-party analytics.
Last updated:
Operator details
- Trading name
- Rahlio
- Contact
- support@rahlio.com
Incorporation is in progress. Registration details will appear here as soon as it completes, and will be provided to any party that requires them in order to contract.
1. What cookies are
1.1. A cookie is a small text file that a website stores in your browser. Similar technologies include browser storage (local storage and session storage) and, in an app, files and identifiers kept on the device. In this policy, "cookies" means all of them.
2. Our approach
2.1. We use only what the Service needs in order to work and to remember choices you made. We use no advertising or tracking cookies, we do not let advertising networks place cookies through our website, and we use no third-party analytics service.
2.2. To know whether the website performs well, your browser sends us a measurement of how fast the page loaded, with the type of page and its language only. It carries no cookie, and we record no IP address or identifier with it.
2.3. To improve the hotel search we also record pseudonymised events on our own systems — for example, that a hotel page was opened. They are not shared with advertisers.
2.4. Neither is sent if your browser signals "Do Not Track" or Global Privacy Control.
3. What the website stores
3.1. The website uses the following, all first-party:
- "rahlio_locale" — a cookie kept for one year that remembers the language you chose.
- "rahlio.session" — session storage that keeps you signed in while the tab is open; it is removed when the tab is closed.
- "rahlio.guest.token" — session storage that lets you plan and search without an account; it is removed when the tab is closed.
- "rahlio.holderKey" — local storage that shows a hold or an order started in this browser is yours; it stays until you clear your browser’s storage.
3.2. All of these are strictly necessary for the Service or remember a choice you made.
4. Third parties on our pages
4.1. On the payment page, the Supplier’s payment form (LiteAPI, with its payment processor Stripe) is loaded inside our page and may use its own cookies to process the payment securely and prevent fraud. Maps load their image tiles from OpenStreetMap, which receives your IP address with each request. We do not control these cookies; the providers’ own policies apply to them.
5. In the app
5.1. The app keeps on your device: your sign-in tokens, in the device’s secure storage (the Keychain on iOS, encrypted storage on Android); your language, currency and onboarding choices; a copy of your trips so that you can read them offline; and a cache of hotel images. Signing out removes the sign-in tokens and the offline trips.
5.2. If you allow notifications, the app registers a push token with Google Firebase Cloud Messaging. The app does not use advertising identifiers and does not track you across other companies’ apps or websites.
6. Your choices
6.1. Because we use only necessary cookies and cookies that remember your choices, we do not show a consent banner. You can delete or block cookies and browser storage in your browser settings; the website will then forget your language and sign you out, but will otherwise keep working.
6.2. If we ever introduce a cookie that is not strictly necessary, we will ask for your consent before using it and update this policy.
7. Contact
7.1. Questions about this policy: privacy@rahlio.com.