Last updated: February 2026
Cookies are small text files a site stores on your device to remember things between visits. Some keep you signed in, others remember which provider or referral code brought you to a page so the right attribution is applied at checkout. This policy is part of our Privacy Policy and sets out every cookie Zuriya Ltd uses.
| Cookie | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
| session_token | Zuriya (first-party) | Strictly necessary | Keeps you signed in. Stored as an httpOnly, Secure, SameSite cookie so it cannot be read by JavaScript. | 7 days (1 day for guest sessions) |
| zuriya_source | Zuriya (first-party) | Functional | Records whether you arrived via a provider's direct-share link (direct_link) so the platform can apply the correct commission to any booking you make with that provider (0% vs marketplace rate). | 30 days |
| zuriya_source_provider | Zuriya (first-party) | Functional | Stores the username of the provider whose share link you followed, used together with zuriya_source. | 30 days |
| zuriya_referral | Zuriya (first-party) | Functional | Holds a friend's referral code if you arrived via a /r/{code} landing page. On your first qualifying booking the platform applies a £5 discount and credits the referrer. | 30 days |
| stripe_* / __stripe_* | Stripe (third-party) | Strictly necessary | Used during checkout and for fraud-prevention by Stripe Payments UK, Ltd. See Stripe's privacy policy. | Up to 1 year (varies by cookie) |
| __cf_bm / cf_clearance | Cloudflare (third-party) | Strictly necessary | Bot mitigation and edge-security, protects the platform from automated attacks. See Cloudflare's privacy policy. | 30 minutes to 30 days |
Zuriya does not set any advertising, cross-site-tracking, or analytics cookies.
Zuriya does not use:
You can delete Zuriya's own cookies at any time through your browser settings (typically under "Privacy" or "Site data"). Blocking the session_token cookie will prevent you from signing in; blocking Stripe cookies will prevent checkout. Blocking the attribution cookies (zuriya_source, zuriya_source_provider, zuriya_referral) is safe and just removes any tracking benefit for the referrer.
If we add a new cookie or change how an existing one is used we will update this page and the "Last updated" date above. Material changes are also flagged in-app.
For questions about our cookies, email privacy@zuriya.co.uk. For a full picture of how we handle your personal data, see our Privacy Policy.
Install Zuriya
Add Zuriya to your home screen for faster access and instant booking updates.