Last updated: July 2026
This policy explains how Hotspots Portugal uses cookies and similar tracking technologies. By using our website and services, you consent to our use of cookies as described here. You can manage your cookie preferences at any time.
A cookie is a small text file stored on your device (computer, tablet, smartphone) that contains information about your browsing activity. Cookies serve several purposes:
| Cookie Type | Purpose | Duration | Requires Consent? |
|---|---|---|---|
| Essential/Necessary | Keep site functioning, authentication, security | Session or 1–12 months | No (legally required for site operation) |
| Analytics | Understand user behavior, improve the site | 12–24 months | Yes (unless anonymized) |
| Preference | Remember language, theme, notification settings | 1 year | Yes (optional, but improves experience) |
| Marketing/Advertising | Track interest for targeted ads | 1–24 months | Yes (most invasive) |
Essential cookies enable the basic functioning of the website. Without them, you cannot log in, save your reviews, or access your account. These are always active and do not require consent.
| Cookie Name | Purpose | Duration |
|---|---|---|
hotspots_session_id |
Maintains your session (keeps you logged in) | Session (until browser closes) |
auth_token |
Stores JWT authentication token for API requests | 30 days |
csrf_token |
Prevents cross-site request forgery attacks | Session |
user_id |
Identifies your account (anonymized, not sensitive) | 30 days |
security_flag |
Flags suspicious activity (multiple login attempts, bot detection) | 24 hours |
We use analytics to understand:
Your IP address is anonymized: We replace the last octet (e.g., 192.168.1.100 becomes 192.168.1.0). This prevents us from identifying your location or device beyond a city level.
| Detail | Value |
|---|---|
| Service | Netlify Analytics (server-side, privacy-first) |
| Cookie Name | nf_ab (A/B testing) |
| Duration | 30 days |
| Data Stored | Page views, referral source, device type (no personal data) |
| GDPR Compliant? | Yes (anonymized, EU-hosted, no third-party sharing) |
| Retention | 12 months (automatically deleted) |
You can opt out of analytics cookies in your Settings → Privacy → "Analytics." We will stop collecting analytics data for your account, though we may still see that a visitor came from your region (not your specific location).
Preference cookies improve your experience by remembering your choices:
| Cookie | Stores | Duration |
|---|---|---|
language_pref |
Your language preference (English, Portuguese) | 1 year |
theme_pref |
Light or dark mode | 1 year |
notification_settings |
Email, push, or browser notification preferences | 1 year |
gender_pref |
For Insiders: gender for grammatically correct Portuguese emails | Account duration |
accessibility_prefs |
Font size, high contrast, screen reader mode | 1 year |
You can disable preference cookies in Settings → Privacy. Your experience won't break — you'll just need to set your preferences each visit.
Marketing cookies track your browsing to show relevant ads. These are optional and require explicit consent. We do not use them by default.
Currently disabled on Hotspots Portugal. If we enable targeted advertising in the future, we will:
Future marketing cookies would help us:
Even if you enable marketing cookies on Hotspots, you can opt out of targeted advertising from major networks:
| Service | Purpose | Cookie Name(s) | Data Collected | GDPR Compliant? |
|---|---|---|---|---|
| Netlify (hosting) | Server analytics, performance monitoring | nf_ab, nf_ref |
Page views, referral source, anonymized IP | ✓ Yes |
| Supabase (authentication) | Manages authentication tokens securely | sb:token |
Session ID only (encrypted) | ✓ Yes |
| Railway (backend) | API request handling, server load balancing | railway_session |
Minimal (API routing only) | ✓ Yes |
| Brevo (email) | Email tracking (if you subscribe to newsletter) | brevo_tracking |
Email open/click tracking (optional) | ✓ Yes (requires consent) |
We do not use cross-site tracking. We don't track your behavior on other websites or share your browsing history with advertising networks. Cookies set by third parties are limited to essential service delivery only.
You can manage cookies directly in your account:
You can also manage cookies at the browser level. Here's how for major browsers:
If your browser sends a "Do Not Track" signal, we honor it and limit analytics tracking. To enable DNT:
Heads up: If you delete all cookies, you'll need to log in again to your Hotspots account.
We use browser storage (not cookies) to store:
This is not tracking; it's just convenience. Data is stored only on your device, not sent to our servers.
We may use small tracking pixels in emails to detect if you open them. This only applies if you've opted into our newsletter. You can disable email tracking in Settings → Email Preferences.
We also track data server-side (which pages are requested, when) without storing information on your device. This data is anonymized and aggregated.
Under GDPR, we require explicit, informed consent for non-essential cookies:
| Cookie Category | Legal Basis | Requires Consent? | Your Action |
|---|---|---|---|
| Essential | Legitimate interest (site must function) | No | Always active |
| Analytics (anonymized) | Legitimate interest (improve site) | No (if anonymized) | Active by default; opt-out available |
| Preferences | Consent (improves user experience) | Yes (recommended) | Opt-in at first visit |
| Marketing/Advertising | Consent (targeting) | Yes (most important) | Opt-in via banner |
When you visit Hotspots for the first time, you'll see a cookie consent banner like this:
You can change your mind at any time. Go to Settings → Privacy → Cookie Preferences to withdraw or modify your consent. No penalty; you can re-enable cookies later if you want.
Questions about this Cookie Policy?
Email: hello@hotspotsportugal.com
We'll respond within 10 business days with clarifications.
This Cookie Policy is effective as of July 2026 and complies with GDPR, Portuguese LGPD, and ePrivacy Directive standards. We update it periodically as our services evolve. Last review: July 2026.