Cookie Policy
Last updated: 20 September 2026
Which cookies we use
This site uses only strictly-necessary cookies and browser storage — no analytics, advertising, or social-media cookies.
authToken — login session token (httpOnly, valid for about 1 hour, auto-renewed).
refreshToken — keeps you logged in longer-term (httpOnly, valid for up to 7 days).
oauthState — created only when starting a Google sign-in, lives a few minutes, authenticates the login request.
NEXT_LOCALE — remembers your chosen language (Hungarian/English/German) so you don't have to pick it again on your next visit.
cookieConsent (browser local storage, not a cookie) — remembers your cookie-consent choice.
theme (browser local storage, not a cookie) — remembers your light/dark theme preference.
Browser notifications (Web Push)
If you click "Enable notifications," your browser stores a unique subscription identifier and sends it to our server so you can be notified about bookings and approvals. You can revoke this at any time in your browser settings.
Managing consent
Login wouldn't work without the strictly-necessary cookies, so no separate consent is requested for them — their legal basis is the legitimate interest of providing the service you asked for.
Browser notifications are always enabled through your own separate, voluntary consent, triggered by the cookie banner's "Enable notifications" button.