1. Introduction

This Cookie Policy explains how Next Orbit OÜ, trading as LocaYo ("we", "us") uses cookies and similar technologies on locayo.app and our mobile applications.
This policy complies with:
- EU/Estonia: ePrivacy Directive (2002/58/EC) and GDPR (2016/679), as directly applicable in Estonia
- Poland: the Electronic Communications Law Act (in force since 10 November 2024, replacing the Telecommunications Law Act) and the GDPR
By using our Platform, you acknowledge this Cookie Policy. Where we require consent for cookies, we will ask for it before placing them. Non-essential cookies are not placed until you provide consent.

2. What Are Cookies?

Cookies are small text files stored on your device when you visit a website.
Cookies serve various purposes: remembering preferences, understanding usage, and showing relevant content.
First-party cookies are set by us. Third-party cookies are set by other companies whose services we use.
Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or you delete them.

Essential for the Platform to function. Cannot be switched off. No consent required.

Cookie	Purpose	Duration
refreshToken	Renews your login session without re-entering the password (httpOnly cookie)	30 days
sessionId	Identifies your device within a session (httpOnly cookie)	Session
locayo_token	Account access token — browser storage (localStorage)	Until logout
locayo_user	Basic details of the signed-in account — browser storage	Until logout
locayo_consent	Remembers your consent choices	1 year
locayo_ref	Referral code from the Partner Programme	90 days

Enable enhanced functionality and personalisation. Require consent.

Cookie	Purpose	Duration
locayo_prefs	Your preferences (language, display)	1 year
locayo_location	Your chosen search location	30 days
recent_searches	Your recent search queries	30 days

Help us understand how visitors use our Platform. Require consent. These cookies are only set after you give consent.

Provider	Cookie	Purpose	Duration
Google Analytics	_ga	Distinguishes users	2 years
Google Analytics	_ga_*	Session state	2 years
Google Analytics	_gid	Distinguishes users	24 hours
Cloudflare Web Analytics	beacon.min.js (no persistent cookies)	Anonymous traffic statistics (page views, performance) without cross-site tracking or advertising profiles	Session (aggregated data)

Track activity to show relevant advertisements. Require consent. These cookies are only set after you give consent.

Provider	Cookie	Purpose	Duration
Meta	_fbp	Browser ID for ads	90 days
Meta	_fbc	Ad click tracking	90 days
Google Ads	_gcl_au	Conversion tracking	90 days

Cookie Banner: Accept all, reject non-essential, or customise preferences on first visit. Non-essential cookies (analytics, marketing, functional) are blocked until you make a choice.
Change Preferences: Click "Cookie Settings" in the footer at any time to update your choices.
Browser Settings: Configure your browser to block or delete cookies.
Opt-out Links:

Third-party cookies are governed by their respective privacy policies:

We may update this Cookie Policy to reflect changes in our practices or legal requirements.
Material changes will be notified through a notice on our Platform. Where changes affect the types of cookies we use, we may re-prompt you for consent.
Current version always available at: locayo.app/legal/cookies

For questions about cookies: