Skip to content

Cookies and device storage

Version 1.2.0Effective 14 October 2026Last updated: 14 October 2026

What we store in your browser or on your phone, what each item is for, and how to get rid of it.

1. Everything we store

What
Supabase session cookies
Kind
Essential
What it does
Keep you signed in as you move between pages
How long
As long as the session lives
What
Language cookie (NEXT_LOCALE)
Kind
Essential / preference
What it does
Remembers whether you chose Spanish or English
How long
One year
What
Session identifier (huatulco.sid, in sessionStorage)
Kind
Analytics
What it does
Groups the events of one visit so every tap is not counted as a new visitor
How long
Dies when you close the tab
What
Welcome draft (in localStorage)
Kind
Essential / preference
What it does
Holds your answers from the first screen while you have no account
How long
Until you clear site data or create an account
What
Record of your acceptance (huatulco.legal.install.v1 and huatulco.legal.record.v1.…, in localStorage)
Kind
Essential
What it does
Remembers that you already accepted the Terms and read the privacy notice, so you are not asked again. The first is a random identifier for this install: it is sent with your acceptance and kept with it as evidence
How long
Until you clear site data
What
Acceptance draft (huatulco.legal.draft.v1, in sessionStorage)
Kind
Essential
What it does
Keeps the boxes you already ticked while you read the Terms
How long
Dies when you close the tab
What
Measurement preference (huatulco.analytics, in localStorage)
Kind
Preference
What it does
Remembers whether you switched off usage measurement in Profile → Privacy and data
How long
Until you clear site data
What
Interface flags (in localStorage)
Kind
Preference
What it does
Remember that you have seen the welcome, the prompts you dismissed and the favourite you meant to save before signing in
How long
Until you clear site data
What
Notification identifier (huatulco.push.token, in localStorage, app only)
Kind
Essential
What it does
Your phone’s notification identifier, if you allow notifications, so they stop when you sign out
How long
Until you sign out or clear the app’s data
What
Offline cache (native app only)
Kind
Essential
What it does
Stores the content pack so the app works with no signal
How long
Until you clear the app’s data
What
Your cruise day (huatulco:cruise-day:…, in localStorage)
Kind
Essential
What it does
Keeps your ship’s plan for the day, the time to be back and the useful phone numbers, so “Your day in Huatulco” opens with no signal
How long
Until you open another ship day or clear site data
What
Your session (native app only, in the phone’s secure storage)
Kind
Essential
What it does
Keeps you signed in to your account in the app
How long
Until you sign out or delete the app
What
Language and appearance (native app only)
Kind
Preference
What it does
Remember the language and theme you chose in the app
How long
Until you clear the app’s data

2. What is not here

There are no advertising cookies, no tracking pixels, no cross-site tracking, and no third-party analytics or crash-reporting SDK of any kind. This is not a statement of intent: it was verified across the whole codebase.

The only analytics are ours and first-party, and they do two concrete things: rank places by real popularity, and populate the dashboards businesses pay for. Those events carry no user column.

When you follow a link to one of our partners’ booking sites, that site — and, for some, the network that runs its affiliate programme — may store its own cookies in your browser to record that you came from here. That happens on their domain, not ours, under their policies; the Privacy notice says who they are.

3. Why there is no consent pop-up

Mexico does not impose the prior pop-up consent that European rules require. The law that applies here treats this storage as ordinary processing: the notice must be made available to you, and consent is tacit unless you say otherwise.

There would also be nothing to ask about: there is no advertising and no tracking to authorise. A dialog asking permission to remember your language would be paperwork, and paperwork is what teaches people to accept without reading.

4. How to get rid of it

  • Close the tab and the analytics identifier is gone. There is nothing else to do.
  • Clear site data in your browser and the language cookie, the welcome draft, the measurement preference and the local record of your acceptance go too, so you will be asked to accept the Terms again. It will sign you out.
  • Browse privately and none of this survives the window.
  • Blocking cookies for this site will stop you signing in: session cookies are the mechanism by which the app knows you are you.
  • In the native app, clearing the app’s data from your phone’s settings removes the offline cache, your session and your preferences.

To stop sending us usage measurements, switch off “Usage measurement” in Profile → Privacy and data: it is kept in that browser or on that phone. To object to the analytics purpose in general, write to us — the route is at Your data and your rights.