Legal information

Cookie policy

What the hotelspot website stores in your browser, why it does so and how you can change your choice at any time.

What cookies are

Cookies are small text files that a website stores in your browser. Browser storage works in a similar way: localStorage (data stays until deleted) and sessionStorage (data is removed when you close the tab). The website stores short pieces of information there, which stay on your device and are not sent to the server with every request. This policy describes all of these mechanisms.

Who is responsible for cookies

The website is operated by Spotstay Sp. z o.o. with its registered office in Kraków, ul. Cystersów 13/6, 31-553 Kraków, Poland, KRS: 0001096818, NIP: 6762665735, REGON: 528200240. For questions about cookies and privacy, write to kontakt@hotelspot.pl.

How we ask for consent

On your first visit we show a banner with the buttons "Accept", "Custom" and "I do not accept". "Custom" lets you enable analytics and marketing cookies separately. Until you consent to a category, we do not load its tools (Google Analytics and Microsoft Clarity, or the Meta pixel), and Google Consent Mode v2 has all consents set to denied.

You can change your choice at any time: the "Manage cookies" link in the footer opens the banner again.

Essential and functional (no consent needed)

This data is needed for the website or the feature you are using to work. We keep it in browser storage, not in cookies, and it is not used for tracking.

hs-consent

Type: localStorage

Purpose: Remembering your choice in the cookie banner

Retention: Until you change your choice or clear site data

hs-demo-watched

Type: localStorage

Purpose: Marking demo videos you have already watched

Retention: Until you clear site data

hs-note-dismissed

Type: localStorage

Purpose: Remembering that the tip window was closed

Retention: The window returns after 30 days

hs-report-sends

Type: localStorage

Purpose: Protecting the calculator report form against repeated sending: time sent, email address and calculation inputs, only in your browser

Retention: Entries from the last 24 hours

hs_full_audit_order

Type: sessionStorage

Purpose: Full audit order data (option, property, contact and invoice details) kept through the payment redirect and back

Retention: Until you close the tab; removed after successful payment

hs-demo-banner-closed

Type: sessionStorage

Purpose: Remembering that the demo banner was closed

Retention: Until you close the tab

hs_audit_sticky_closedhs_audit_popup_closed

Type: sessionStorage

Purpose: Remembering that the pop-up audit form was closed

Retention: Until you close the tab

hs-lang-auto

Type: sessionStorage

Purpose: Information about automatic language selection

Retention: Until the next page loads

Name	Type	Purpose	Retention
`hs-consent`	localStorage	Remembering your choice in the cookie banner	Until you change your choice or clear site data
`hs-demo-watched`	localStorage	Marking demo videos you have already watched	Until you clear site data
`hs-note-dismissed`	localStorage	Remembering that the tip window was closed	The window returns after 30 days
`hs-report-sends`	localStorage	Protecting the calculator report form against repeated sending: time sent, email address and calculation inputs, only in your browser	Entries from the last 24 hours
`hs_full_audit_order`	sessionStorage	Full audit order data (option, property, contact and invoice details) kept through the payment redirect and back	Until you close the tab; removed after successful payment
`hs-demo-banner-closed`	sessionStorage	Remembering that the demo banner was closed	Until you close the tab
`hs_audit_sticky_closedhs_audit_popup_closed`	sessionStorage	Remembering that the pop-up audit form was closed	Until you close the tab
`hs-lang-auto`	sessionStorage	Information about automatic language selection	Until the next page loads

We also count page views with Vercel Web Analytics. It stores no cookies or identifiers in the browser and cannot identify a person, so it runs without consent.

Analytics (after consent)

With your consent to analytics cookies we use Google Analytics 4 (Google Ireland Limited) to learn which content is useful, and Microsoft Clarity (Microsoft Ireland Operations Limited), which creates click maps and anonymous session recordings. Clarity masks text typed into form fields.

_ga

Type: cookie

Purpose: Distinguishing users in Google Analytics

Retention: 2 years

_ga_<ID>

Type: cookie

Purpose: Keeping session state in Google Analytics

Retention: 2 years

_clck

Type: cookie

Purpose: User identifier in Microsoft Clarity

Retention: 1 year

_clsk

Type: cookie

Purpose: Grouping page views into one session in Microsoft Clarity

Retention: 1 day

CLIDMUID

Type: cookie (clarity.ms, bing.com)

Purpose: Browser recognition by Microsoft Clarity

Retention: 1 year

Name	Type	Purpose	Retention
`_ga`	cookie	Distinguishing users in Google Analytics	2 years
`_ga_<ID>`	cookie	Keeping session state in Google Analytics	2 years
`_clck`	cookie	User identifier in Microsoft Clarity	1 year
`_clsk`	cookie	Grouping page views into one session in Microsoft Clarity	1 day
`CLIDMUID`	cookie (clarity.ms, bing.com)	Browser recognition by Microsoft Clarity	1 year

Marketing (after consent)

We use the Meta Pixel to measure the performance of ads on Facebook and Instagram. The provider is Meta Platforms Ireland Limited.

_fbp

Type: cookie

Purpose: Browser identifier used by the Meta Pixel

Retention: 90 days

_fbc

Type: cookie

Purpose: Information about the Meta ad click that led to the site

Retention: 90 days

Name	Type	Purpose	Retention
`_fbp`	cookie	Browser identifier used by the Meta Pixel	90 days
`_fbc`	cookie	Information about the Meta ad click that led to the site	90 days

When you submit a form and have accepted all cookies, we also send the same event to Meta from our server (Conversions API). It includes the identifiers from the _fbp and _fbc cookies, your IP address, browser details and SHA-256 hashes of your e-mail address, phone number, first name and last name. Without consent we send nothing, neither from the browser nor from the server.

Third-party services

Google property search (audit forms): the phrase you type is sent to the Google Places API through our server, so Google does not receive your IP address or set cookies for it.
Stripe payments: online payment takes place on the Stripe page, which sets its own cookies needed for payment security, as described in Stripe's policy.
Google Calendar: the booking window is loaded only after you click the button. From then on Google may set its own cookies as described in its privacy policy.
Google Fonts: the Inter font is loaded from Google servers. Google does not set cookies for this, but it receives your IP address.
Vercel: website hosting. The server keeps standard technical logs (IP address, time, page address) without cookies.

How to manage cookies

Apart from the banner, you can delete and block cookies and site data in your browser settings. If you clear the site data, you will see the banner again on your next visit.

Google Chrome: Settings, Privacy and security, Cookies and site data.
Mozilla Firefox: Settings, Privacy & Security, Cookies and Site Data.
Safari: Settings, Privacy, Manage Website Data.
Microsoft Edge: Settings, Cookies and site permissions.

Changes to this policy

We update this policy whenever we change the tools used on the site. The current version is always available at this address.

Last updated: 30 September 2026