Cotrawell uses cookies and similar technologies to make the platform
work correctly and to understand how it's used. This policy explains
what they are, which ones we set, and how you can control them.
1. What Are Cookies?
Cookies are small text files placed on your device by a website.
They allow the website to remember information about your visit —
such as whether you're logged in or your language preference — so
you don't have to re-enter it each time.
We also use similar technologies such as localStorage,
sessionStorage, and pixel tags. This policy covers all of them.
2. Types of Cookies We Use
These cookies are required for the platform to function. They
enable authentication (via AWS Cognito), maintain your session,
protect against CSRF attacks, and support secure payment flows.
You cannot opt out of these without breaking core functionality.
These remember your preferences — such as saved search filters,
notification settings, and UI preferences — so you don't have to
reset them on every visit.
These help us understand how users interact with Cotrawell — which
pages are visited, where users drop off in the booking flow, and
how features perform. Data is aggregated and does not identify you
personally.
We do not currently run advertising campaigns. If this changes, we
will update this policy and seek fresh consent before placing any
marketing cookies.
3. Cookie List
| Name |
Category |
Duration |
Purpose |
| ct_session |
Necessary |
Session |
Maintains your authenticated session (HttpOnly, Secure) |
| ct_csrf |
Necessary |
Session |
CSRF protection token for form submissions |
| ct_auth_refresh |
Necessary |
30 days |
Cognito refresh token for staying logged in (HttpOnly) |
| ct_prefs |
Functional |
12 months |
Stores UI preferences (theme, language, filters) |
| ct_analytics |
Analytics |
13 months |
Anonymous session identifier for usage analytics |
| ct_cookie_consent |
Necessary |
12 months |
Stores your cookie consent choices |
4. Third-Party Cookies
Our service providers may set their own cookies when you use
Cotrawell. These include:
-
AWS CloudFront: CDN performance and DDoS
protection
-
Payment processors: Secure checkout flows (their
privacy policies apply)
-
Analytics providers: Aggregated traffic analysis
(configured in privacy-preserving mode)
We do not control third-party cookies. Please refer to each
provider's privacy policy for details.
5. Managing Your Cookie Preferences
You can control cookies in the following ways:
-
Cookie banner: When you first visit Cotrawell,
you can accept or decline optional cookies via our consent banner.
You can revisit these choices at any time from your account
settings.
-
Browser settings: Most browsers let you block or
delete cookies. Note that disabling strictly necessary cookies
will break login and booking functionality.
Browser-specific guidance:
6. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. Cotrawell
currently does not alter its data collection practices based on DNT
signals, as there is no consistent industry standard for
interpreting them. We rely on our cookie consent mechanism instead.
7. Changes to This Policy
We may update this Cookie Policy as our technology or legal
requirements change. We will update the "Last updated" date and,
where changes are material, notify you via the platform or email.
