Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to website operators.

Similar technologies — such as local storage and session storage — serve comparable purposes and are covered by this policy.

We use cookies for the following purposes:

• Essential/strictly necessary: to operate the website, maintain your login session, and process secure payments. These cookies cannot be disabled.
• Functional: to remember your preferences (such as currency selection and locale) across visits.
• Analytics: to understand how visitors use the Service — for example, which pages are most popular. This helps us improve the experience for all users.
• Third-party services: some functionality on the site is provided by third parties who may set their own cookies. See section 4 below.

The table below describes the first-party cookies set by Boatfront:

• bf.session_token — Authentication session cookie set by Better Auth. Scoped to the parent domain so it is shared across www, broker, admin, and auth subdomains. Expires when you sign out or your session expires. Strictly necessary.
• bf.csrf-token — Cross-site request forgery protection. Session duration. Strictly necessary.
• bf-cookie-consent — Stores your cookie-banner choice (accepted or declined). 1 year. Strictly necessary.
• NEXT_LOCALE — Stores your preferred language (e.g., en, fr). 1 year. Functional.
• currency — Stores your preferred display currency. Session duration. Functional.

The following third-party services used by Boatfront may set their own cookies or use similar tracking technologies:

• Stripe — Payment processing. Stripe sets cookies to prevent fraud and remember cart state during checkout. See stripe.com/privacy.
• Vercel Web Analytics — First-party, privacy-friendly analytics. No cookies are used for cross-site tracking; data is anonymised and aggregated. See vercel.com/docs/analytics/privacy-policy.
• Google Analytics 4 (_ga, _ga_*) — Aggregate page-view and engagement analytics. Only set after you click "Accept" on the cookie banner. We use Consent Mode v2 with anonymised IP, ad personalisation disabled, and ad storage disabled. See policies.google.com/privacy.
• Algolia — Site search. Algolia may set cookies to improve search relevance. See algolia.com/policies/privacy.
• Mapbox — Interactive maps on listing detail pages. Mapbox may collect usage data. See mapbox.com/legal/privacy.

We do not use advertising cookies or track you across third-party websites.

You can control or delete cookies at any time:

• Cookie banner: the banner shown on your first visit lets you accept or decline non-essential analytics cookies (Google Analytics). Your choice is stored in the bf-cookie-consent cookie. To change your mind later, clear that cookie and reload the site — the banner will reappear.
• Browser settings: all modern browsers allow you to block, delete, or manage cookies. Consult your browser's help documentation for instructions.
• Opt-out tools: some third-party analytics providers offer opt-out mechanisms — for example, Vercel Web Analytics respects the "Do Not Track" browser setting; Google offers a Google Analytics Opt-out browser add-on at tools.google.com/dlpage/gaoptout.

Please note that disabling strictly necessary cookies will prevent you from logging in or using certain features of the Service.

We may update this Cookie Policy from time to time to reflect changes in the technologies we use or our practices. The "last updated" date at the top of this page shows when it was last revised.

If you have questions about our use of cookies, please contact us at hello@boatfront.com.