1. Essential cookies and browser storage
FoundBookings may use essential cookies or similar browser storage for login, authentication, CSRF protection, session security, account protection, maintenance access, load balancing, fraud prevention, checkout security, and features that are necessary for the requested service.
Auth.js/NextAuth cookies may include session-token, CSRF-token, callback URL, or secure-prefixed variants. Exact names can vary by environment, protocol, and framework configuration.
2. Cookie consent localStorage and preferences
FoundBookings stores cookie consent choices in localStorage under `foundbookings.cookieConsent`. This records the current consent version, essential status, analytics choice, and decision timestamp.
Users can accept analytics, reject analytics, or reopen Cookie preferences where the product provides those controls. Essential cookies and storage are used where necessary for the service and are not disabled through the analytics preference.
3. Optional PostHog analytics
Optional PostHog analytics should initialize only after analytics consent is accepted or where another lawful basis is approved for the relevant environment. If analytics is rejected, PostHog should not initialize for optional analytics capture.
The current PostHog configuration disables autocapture, session recording, heatmaps, performance capture, exception capture, surveys, page-leave capture, campaign parameter saving, and referrer saving. Analytics events are limited and scrubbed before sending.
4. Stripe payment and onboarding context
Stripe.js, Stripe Elements, or Stripe-hosted Connect onboarding may use cookies, device data, browser storage, or third-party storage for secure payment entry, fraud prevention, compliance, account onboarding, payment confirmation, and payout services.
Stripe payment and onboarding storage is separate from optional FoundBookings analytics and may be required in payment or Stripe Connect contexts. Exact Stripe cookie and storage names may vary and can be checked in a production-like browser inspection.
5. Third-party cookies, retention, and updates
Third-party cookies or storage may be set by providers such as Stripe or analytics services where the relevant feature is used and permitted. Cookie lifetimes, storage keys, and exact names may vary by browser, environment, provider, and product configuration.
FoundBookings may update this Cookie Policy as features, providers, consent rules, analytics configuration, or legal requirements change. This beta policy remains subject to legal review before production finalization.