Legal

Cookie policy

Last updated: September 2026

Provisional version. This policy is under legal review. A final version, compliant with GDPR and the ePrivacy directive, will be published soon. For any question, contact us at contact@hozy.co.

01

What is a cookie?

A cookie is a small text file placed on your device when you browse Hozy. It allows the site to recognize you, remember your preferences and measure audience. Some cookies are strictly necessary to operate the site, others are optional and only set with your consent.

02

Cookie categories used

Essential

Required

Required for the site to work: signing in to your account, form security, your chosen language and remembering your cookie choices. The hozy_consent cookie and its copy in your browser's local storage (hozy-cookie-consent) remember your choices (analytics and marketing accepted or refused) so that our servers respect them too; they contain no personal data.

Examples
__Secure-authjs.session-token, __Host-authjs.csrf-token, __Secure-authjs.callback-url, NEXT_LOCALE, hozy_consent, hozy-cookie-consent (local storage)
Duration
End of session for __Host-authjs.csrf-token and __Secure-authjs.callback-url; 30 days for __Secure-authjs.session-token; 12 months for NEXT_LOCALE; 13 months for hozy_consent and hozy-cookie-consent (you are then asked again)

Analytics

Cookieless

Cookieless audience measurement, hosted by us (Umami): it helps us understand how the platform is used so we can improve it. Nothing is stored on or read from your device, the data is aggregated and cannot identify you: no consent is needed.

Examples
Umami, hosted by Hozy (no cookies or local storage)
Duration
Nothing is kept on your device

Functional

Required

Needed for the features you use, set as soon as you use them, with no advertising tracking: hozy-explorer-return-url keeps your Explorer search so you find it again when coming back from a listing.

Examples
hozy-explorer-return-url (session storage)
Duration
End of session

Marketing

Optional

Only set if you accept the "Marketing and advertising" category ("Accept" or "Customize" button). The Meta pixel (Facebook, Instagram) measures how well our ads perform and helps show them to people likely to be interested: Meta receives the pages you view and the _fbp browser identifier. With the same consent, our servers also send Meta some actions (sign-up, booking, adding to favorites) through the Conversions API, with hashed identifiers, and the hozy-attribution cookie keeps the campaign you arrived from (utm or fbclid links) to link it to your account if you sign up. Without this consent, nothing is set or sent to Meta. If you withdraw your consent ("Manage cookies" link at the bottom of every page), these cookies and this storage are deleted.

Examples
_fbp (Meta), lastExternalReferrer and lastExternalReferrerTime (local storage, Meta), hozy-attribution
Duration
90 days for _fbp; 30 days for hozy-attribution; Meta local storage: until you withdraw your consent

03

Manage your consent

You can accept or refuse optional cookies at any time:

  • Through the consent banner shown on your first visit, then at any time through the "Manage cookies" link at the bottom of every page.
  • Directly in your browser settings (Chrome, Safari, Firefox, Edge).
  • Essential cookies cannot be disabled as they are required for the site to work.

04

Third-party cookies

Hozy integrates some third-party services that may set their own cookies or use your browser's storage: Mollie (secure payments), Mapbox (maps) and Meta (advertising, only with your marketing consent). These third parties are subject to their own privacy policies.

Mapbox (maps): as soon as a map is displayed, the Mapbox library saves in your browser's local storage mapbox.eventData.uuid (random identifier, renewed every 24 hours), mapbox.eventData.uuidTimestamp (when that identifier was created) and mapbox.eventData (date of the last report), followed by a suffix specific to our Mapbox account. They are used for the map-load count sent to Mapbox (events.mapbox.com), on which Mapbox bills the service; this count cannot be disabled without breaching Mapbox's terms of service. Map tiles are also cached in your browser ("mapbox-tiles" cache) to display faster. These items remain until you clear the site's data.

05

Retention period

Cookies are kept for a maximum of 13 months from their placement, in line with CNIL and Belgian APD recommendations. After that, your consent is requested again.

06

Your rights

Under GDPR, you have the right of access, rectification, deletion and objection regarding your personal data. To exercise these rights, see our privacy policy or contact us at contact@hozy.co.

07

Contact

For any question about our use of cookies, write to us at contact@hozy.co. You may also lodge a complaint with the Belgian Data Protection Authority (APD).

A question about this document?

contact@hozy.co