Cookie Policy
Version 1.0 · Last updated: 2026-06-04 · JdP Business Travel SL
1. What cookies are
A cookie is a small text file that a website stores in your browser. It allows the site to remember information about your visit (for example, your preferred language, or that you are signed in). Similar technologies such as localStorage are also used; for brevity this policy refers to both together as "cookies", in line with standard practice under Spanish law (LSSI Art. 22).
2. Legal framework
This policy applies the General Data Protection Regulation (GDPR, EU 2016/679), Organic Law 3/2018 (LOPDGDD), Art. 22.2 of Law 34/2002 (LSSI-CE) and the guidance of the Spanish Data Protection Agency (AEPD) on the use of cookies (last updated July 2023).
3. Categories we use
- Essential: indispensable for the site to function (session, authentication, language, the consent cookie itself, payment fraud prevention). Exempt from consent under Art. 22.2 LSSI.
- Analytics: aggregated performance metrics and error traces that help us detect and fix technical problems. These require consent.
- Session replay: masked recording of the interaction in order to reproduce errors. Requires separate consent because it captures more data than basic analytics.
- Functional: reserved for future optional preferences. None are set today.
4. Detail of each cookie
| Name | Category | Provider | Lifetime |
|---|---|---|---|
| sb-gtlhxiyhkrucwdbxokna-auth-token | Essential | JdP Travel (Supabase) | 1 hour (silently renewed while the session is active) |
| NEXT_LOCALE | Essential | JdP Travel | 1 year |
| jdp_consent_v1 | Essential | JdP Travel | 12 months (once elapsed, consent is requested again) |
| __stripe_mid, __stripe_sid | Essential | Stripe Payments Europe Ltd. (EU) | __stripe_mid: 1 year · __stripe_sid: 30 minutes |
| Sentry (no persistent cookie) | Analytics | Sentry Inc. (USA, standard contractual clauses) | For the duration of the active session only |
| Sentry Session Replay (no persistent cookie) | Replay | Sentry Inc. (USA, standard contractual clauses) | For the duration of the active session only |
| (No cookies in this category today) | Functional | JdP Travel | n/a |
Detailed purpose
sb-gtlhxiyhkrucwdbxokna-auth-token — Authenticated user session. Signing in is not possible without this cookie.
NEXT_LOCALE — The user's language preference. Without this cookie the site is shown in the language detected by geolocation on every visit.
jdp_consent_v1 — Stores the user's decision on optional cookies. It is the banner's own cookie — its consent exemption is provided for in Art. 22.2 LSSI.
__stripe_mid, __stripe_sid — Fraud detection in payment processing. Cookies set by Stripe only when the user interacts with a payment form.
Sentry (no persistent cookie) — Error monitoring and performance metrics (Core Web Vitals). Sentry stores anonymous identifiers in localStorage (not an HTTP cookie) for the duration of the session in order to correlate events.
Sentry Session Replay (no persistent cookie) — Masked recording of the user's interaction in order to reproduce errors. All text and inputs are masked by default before leaving the browser.
(No cookies in this category today) — Reserved for future advanced preferences (reminders, customisable UI enhancements, etc.). Once introduced, they will appear here and under the "Functional" toggle in the banner.
5. How to manage your consent
The first time you visit the site, a banner appears where you can (a) accept all optional cookies, (b) reject them all, or (c) configure each category granularly. Your decision is stored for 12 months. You can change it at any time from the "Cookie preferences" link in the footer.
You can also configure your browser to block or delete cookies; bear in mind that blocking the essential ones may prevent the site from working correctly (you will not be able to sign in, for example).
6. International transfers
The analytics and session replay cookies are managed by Sentry Inc., whose servers are located in the USA. The transfer relies on the European Commission's standard contractual clauses (Decision 2021/914/EU) and on the EU-US Data Privacy Framework where applicable. Further detail in the Privacy Policy §5.
7. Contact
For any question regarding this policy or the use of cookies: jorge@jdptravel.com. You may exercise all of the GDPR rights described in the Privacy Policy §7.