Effective 2026-06-04 · Updated 2026-06-04
1. What are cookies
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve performance, and provide information to site owners.
This policy explains how Tourbox Systems Limited ("we", "us", "our") uses cookies and similar technologies on our website at www.tourbox.com and our application at workspace.tourbox.com.
Tourbox Systems Limited is registered in England and Wales under company number 15613075, with its registered office at 125 Freshfield Road, Brighton, England, BN2 0BR.
2. How we use cookies
We use cookies to:
- Keep you signed in and manage your session securely
- Protect against cross-site request forgery attacks
- Manage bot traffic and protect our infrastructure
- Remember your display preferences (such as light or dark mode)
- Process payments securely through our billing provider
- Track and fix errors in our application
We do not currently use any analytics or advertising cookies. If we introduce them in the future, we will update this policy and obtain your consent before setting them.
3. Cookies we use
Strictly necessary cookies
These cookies are essential for the website and application to function. They cannot be switched off. Under the UK Privacy and Electronic Communications Regulations (PECR), these do not require your consent.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| Hanko session / JWT cookies | Manage your authenticated session using passwordless sign-in. Set on the .tourbox.com domain. | Session-based with refresh tokens | Hanko (first-party) |
| CSRF token | Protects against cross-site request forgery attacks on form submissions. | Session | Tourbox (first-party) |
__cf_bm | Cloudflare bot management. Distinguishes between humans and automated traffic. | 30 minutes | Cloudflare (third-party) |
Functional cookies
These cookies remember choices you make to give you a better experience.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| Colour mode preference | Remembers whether you chose light or dark mode. | 1 year | Tourbox (first-party) |
| Locale / language preference | Remembers your preferred language. | 1 year | Tourbox (first-party) |
Third-party cookies
These cookies are set by services we rely on to operate the platform.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| Paddle checkout cookies | Set when the Paddle billing overlay loads during checkout. Used for payment processing. | Varies | Paddle (third-party) |
| Error tracker session | Error tracking session identifier. Only set when error tracking is active. | Session | Tourbox (self-hosted, first-party) |
Analytics cookies
We do not currently use any analytics cookies. If we add analytics in the future, we will update this policy and request your consent before any analytics cookies are set.
4. Local storage and session storage
In addition to cookies, our application uses browser storage mechanisms that are not cookies and are not sent to our servers with each request.
Session storage (cleared automatically when you close the browser tab):
auth_redirect-- stores the URL to return you to after signing in.tbx-pref-*-- stores temporary UI preferences such as dashboard display mode.
Local storage (persists until you clear it manually):
- Long-term UI preferences when you have explicitly chosen to save them.
These storage mechanisms do not track you across sites and are used solely to improve your experience within the application.
5. How to manage cookies
Most web browsers allow you to control cookies through their settings. You can typically:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block cookies from specific sites
- Block all cookies
- Delete all cookies when you close your browser
Please note that blocking strictly necessary cookies will prevent the application from functioning correctly. You will not be able to sign in or use the platform without them.
For instructions on managing cookies in common browsers:
6. Consent
Under the UK PECR:
- Strictly necessary cookies do not require your consent. These are essential for the service you have requested (signing in, security, infrastructure protection).
- Functional cookies enhance your experience but are not essential. Where required, we will ask for your consent before setting these.
- Analytics and marketing cookies, if introduced in the future, will always require your explicit consent.
You can withdraw your consent at any time by adjusting your browser settings or contacting us.
7. Changes to this policy
We may update this Cookie Policy from time to time. When we make changes, we will update the date at the top of this page. We encourage you to review this policy periodically.
8. Contact us
If you have any questions about our use of cookies, please contact us at:
Email: privacy@tourbox.com
Post: Tourbox Systems Limited, 125 Freshfield Road, Brighton, England, BN2 0BR
9. Related policies
If you are a traveller using the Tourbox consumer app, please see our Consumer Cookie Policy.