Legal

    Cookie Policy

    Last updated: 9 October 2026

    This policy explains the cookies and similar technologies used on sento.travel. You can accept all, reject non-essential cookies or choose your preferences using our cookie banner. Marketing and analytics only run after you give consent.

    What cookies are

    Small files stored on your device that help a site function, remember preferences, and understand usage.

    The cookies we use

    • Strictly necessary — required for the site and booking process (session, security, checkout); can't be switched off.
    • Functional — remember site preferences where you allow them.
    • Analytics — first-party page analytics supplied by our hosting platform, Lovable.
    • Marketing and affiliate — Awin referral attribution and campaign measurement.

    Specific cookies

    The list below covers site-session, hosting, payment and affiliate technologies. Cookies may depend on the pages you visit and whether you arrive through an affiliate link. Where a provider's exact expiry has not been verified, we say so rather than give a guessed duration.

    • session-id — Sento / hosting: identifies a site session where used. Session-based; removed when the browser session ends.
    • __dpl — Lovable hosting: keeps visits associated with the site's deployment. 7 days, as observed on sento.travel.
    • __cf_bm — Cloudflare: automated-traffic and security checks for hosting. 30 minutes.
    • __stripe_mid — Stripe: payment security and fraud prevention. 1 year.
    • __stripe_sid — Stripe: payment security and fraud prevention for the current session. 30 minutes.
    • m — Stripe: device recognition for payment fraud prevention. Approximately 400 days, as observed on sento.travel.
    • sento-cookie-consent-v1 — Sento: browser local storage recording your cookie choices. Remains until cleared or replaced by a later choice.

    Hosting analytics

    Lovable supplies built-in first-party page analytics. Resources include ~flock.js, /__l5e/events and /~api/analytics (including events and tracking endpoints). These are scripts and request paths, not cookie names. They measure page visits and site usage. The hosting platform adds the scripts to every page, but nothing they collect is sent until you allow Analytics; without that consent their requests are blocked in your browser. No separate analytics-cookie expiry has been verified for these resources.

    Marketing and affiliate attribution

    Awin's MasterTag (advertiser 131607) loads on every page and is told whether you have given Marketing consent; without it, Awin does not use marketing cookies. Sento stores sento-awc in a first-party cookie and local storage for 180 days after a consented affiliate click. Before you decide, an arriving click ID is held only in page memory; rejection discards it. Awin receives booking reference, value excluding fee and VAT, currency and voucher for affiliate measurement. Turning Marketing off deletes this click record and stops new reporting. We retain consent-choice history, including acceptance and withdrawal, with visitor ID, timestamp, region where known and notice version; the notice version sento-awin-only-2026-10-22 covers the Awin data and purposes described here. Earlier choices are referenced as sento-consent-v1-legacy: the original notice offered essential cookies and separate Functional, Analytics and Marketing choices, with Marketing described as campaign measurement and relevant Sento ads. Existing refusals remain refusals.

    If you arrive from a cashback or loyalty site, we set a strictly necessary cookie so your cashback can be paid. This is set even if you decline marketing cookies.

    Managing cookies

    Accept or reject non-essential cookies via our cookie banner, change your choice any time using Cookie settings below, or block/delete cookies in your browser settings (some features may not work as a result).

    Questions?

    hello@sento.travel