Cookie Policy

This page explains exactly which cookies and similar technologies easyhotelrfp.com sets, what each one does, who it shares data with, and how to manage your consent at any time. Written for humans, not lawyers.

Manage your cookie preferences

You can change your consent at any time by clicking the button below. This will reopen the consent banner and let you grant or withdraw consent per category.

What is a cookie?

A cookie is a small text file your browser stores when you visit a website. Cookies let sites remember things like whether you are logged in, what language you picked, or whether you already consented to analytics. Some cookies are essential; others are optional.

We also use related technologies like localStorage and sessionStorage (to remember UI state) and server-side logs (standard web traffic logs). We describe everything below in one place.

The cookies we use

1. Strictly necessary (always on)

These are required for the site and the app to work. You cannot opt out of them, but they do not track you and do not share data with third parties for marketing.

NamePurposeWho sets itLifetime
er_cookie_consent_v1Stores your cookie consent choicesEasy RFP (first-party)12 months
sb-access-token, sb-refresh-tokenKeeps you logged into the app on app.easyhotelrfp.comSupabase (our auth provider)Session & 30 days
__cf_bm, cf_clearanceBot protection and DDoS mitigationCloudflare (our CDN)30 min – 1 year

2. Functional (always on for logged-in users)

Remember UI preferences so the app does not forget your settings on every visit. No tracking, no third parties.

Storage keyPurposeWho sets itLifetime
easyrfp_* (localStorage)App UI state: selected RFP, draft data, dismissed bannersEasy RFP (first-party)Until logout or manual clear

3. Analytics (opt-in)

Helps us understand how people use the site so we can improve it. These only load if you consent under "Analytics" in the banner. We never sell analytics data and never link it to your identity.

NamePurposeProviderLifetime
ph_* (PostHog)Product analytics: which pages are read, which CTAs get clicked, session replay (masked inputs)PostHog (EU instance, eu.i.posthog.com)Up to 12 months
_ga, _ga_*Google Analytics 4 — aggregate traffic and referral source reportingGoogle (GA4)Up to 2 years

4. Marketing (opt-in)

Currently we do not set any marketing or advertising cookies. If that changes in the future, we will update this page, request renewed consent, and give you advance notice.

Third parties and data sharing

The third-party services above process limited data on our behalf under their own privacy terms. None of them receive data unless you consented to the relevant category.

How to refuse or withdraw consent

Three options:

  1. Click the button at the top of this page to reopen the banner and change your choices.
  2. Clear cookies in your browser. Next visit, the banner will reappear with the default (all optional categories off).
  3. Block cookies entirely in your browser settings — the marketing site will still work, but the app on app.easyhotelrfp.com requires essential cookies to keep you signed in.

Do Not Track

We honor the Do Not Track (DNT) browser header. If DNT is enabled, we treat that as a signal to not load analytics cookies, even if consent was previously granted.

Changes to this policy

If we add new cookies or change how existing cookies are used, we will update this page and, where required, request renewed consent through the banner. Changes are dated below. We will never add marketing or tracking cookies retroactively without asking again.

Questions? Email [email protected]. This policy sits alongside our Privacy Policy and Terms & Conditions.
Last updated: 2026-04-23 · version 1.0