1. Introduction
This Cookie Policy explains how Tourmate360 ("we", "us", "our") uses cookies and similar tracking technologies when you visit or use https://tourmate360.com (the "Service").
This policy should be read together with our Privacy Policy.
Tourmate360 is operated from Spain. Cookie use is assessed under the EU ePrivacy rules and the GDPR, as applied under Spanish law.
2. What Are Cookies
Cookies are small text files stored on your device (computer, mobile, tablet) when you visit a website. They are widely used to ensure websites function properly, improve user experience, and provide essential security features.
Cookies may be:
- Session cookies (deleted when you close your browser)
- Persistent cookies (stored until they expire or are deleted manually)
3. Types of Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the operation of the Service. They enable:
- User authentication and login (including Supabase session cookies)
- Session management
- Security features
- Access to protected areas of the platform
- Payment and checkout flows (Stripe)
Without these cookies, the Service cannot function properly.
3.2 Functional / Preference Cookies
These cookies remember choices that personalize the Service for you. They are not used for advertising or cross-site tracking. Examples include:
- Interface language preference
- Preferred or detected country used to center maps and default search filters
- Browser language preference signal used to prepare localization
4. Cookies Set by Tourmate360
In addition to authentication cookies set by our providers, we may set the following first-party cookies:
- tourmate-language — stores your selected UI language (or a language seeded from your browser's Accept-Language header until you choose otherwise). Persistent (up to 12 months).
- tm_preferred_language — stores the primary language tag from your browser's Accept-Language header so we can prepare future localization. Persistent (up to 12 months).
- tm_country — stores an approximate country code (ISO 3166-1 alpha-2) derived from your IP address via our hosting provider (Vercel), used to center maps and default venue/band/bus filters. Persistent (up to 30 days).
- tm_country_override — stores a country you manually select in the Service (overrides IP-based detection until cleared). Persistent (up to 30 days).
We do not use the browser Geolocation API or request precise device location permission for this purpose. Country detection is approximate (country-level only).
5. Cookies We Do NOT Use
At this stage, Tourmate360 does NOT use:
- Advertising cookies
- Behavioural tracking cookies for marketing
- Third-party ad network cookies
- Retargeting pixels (e.g. Facebook Pixel, Google Ads remarketing)
6. Third-Party Cookies
Some third-party services integrated into Tourmate360 may set cookies, including:
6.1 Supabase
Used for authentication and session management.
6.2 Stripe
Used for payment processing, fraud prevention, and secure checkout sessions.
6.3 Vercel
Used for hosting, performance optimization, infrastructure delivery, and approximate country detection from IP (edge headers). Vercel may process connection metadata as part of delivering the Service.
6.4 Google Maps / Places
Used when you interact with maps, place search, or geocoding features. Google may set or read cookies or similar technologies in accordance with Google's own policies.
6.5 GoDaddy
Used for domain and DNS management.
These third parties may use cookies in accordance with their own privacy and cookie policies.
7. Legal Basis for Cookies (GDPR / Spanish law)
We use strictly necessary cookies because they are required to provide the Service you request (security, authentication, payments).
We use functional preference cookies (language and country) based on our legitimate interests (Art. 6(1)(f) GDPR) in providing a localized, usable interface, and — where you manually choose a language or country — based on your action setting that preference.
Where required by law for non-essential cookies (for example advertising or non-necessary analytics), we will obtain consent before setting them. We do not currently use such cookies.
8. Cookie Duration
Cookies may remain on your device for different periods:
- Session cookies: deleted when browser is closed
- Persistent preference cookies: typically up to 30 days (country) or up to 12 months (language), or until you delete them
- Provider cookies (e.g. Stripe or Supabase): durations set by those providers
9. Managing Cookies and Preferences
You can control cookies through your browser settings. Most browsers allow you to:
- Block all cookies
- Delete existing cookies
- Receive alerts before cookies are stored
Within the Service, you may change your language in the language menu and your country preference in the country menu (including reverting to the detected country). Clearing site cookies will reset these preferences.
Please note that disabling strictly necessary cookies may prevent the Service from functioning correctly.
10. Consent
Where required by applicable law, users will be informed about cookie usage upon first visit and may be required to provide consent for non-essential cookies.
By continuing to use the Service, you acknowledge the use of strictly necessary and functional preference cookies as described in this policy.
11. Data Processing and Third Parties
Cookies may involve processing by third-party service providers, including:
- Supabase (authentication and database services)
- Stripe (payment processing and fraud prevention)
- Vercel (hosting, edge delivery, and approximate IP country)
- Google (maps and places features, where used)
- GoDaddy (domain services)
These providers act as data processors or independent controllers depending on context.
12. International Transfers
Some third-party providers may process cookie-related data outside the European Union.
Where this occurs, appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.
13. Changes to This Cookie Policy
We may update this Cookie Policy from time to time.
Updates will be posted on this page with an updated "Last Updated" date.
Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact
If you have any questions about this Cookie Policy, you can contact us at: support@tourmate360.com