Cookie Policy
Last updated: May 10, 2026
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember information about your visit — like your login status and preferences — so your next visit is easier and the site is more useful to you.
Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain until they expire or you delete them). They can also be "first-party" (set by us) or "third-party" (set by services we use, like Google Analytics).
2. What Cookies We Use and Why
Best by Locals uses only two categories of cookies:
Strictly Necessary
Purpose: Authentication, security, and core site functionality
Examples: JWT session tokens, CSRF protection, admin authentication
Retention: Session or until logout
Can be disabled: No — required for the site to function
Analytics
Purpose: Understand how visitors use the site so we can improve it
Examples: Google Analytics 4 (page views, session duration, traffic sources)
Retention: Up to 14 months
Can be disabled: Yes — via our consent banner or your browser settings
3. Specific Cookies
| Cookie | Purpose | Type | Duration | Provider |
|---|---|---|---|---|
| _ga | Distinguishes unique visitors across sessions | Analytics | 14 months | Google Analytics 4 |
| _ga_* | Maintains session state for GA4 reporting | Analytics | 14 months | Google Analytics 4 |
| JWT auth tokens | Keeps you signed in (user, business, or admin sessions) | Essential | Session / until logout | Best by Locals |
| CSRF token | Protects form submissions from cross-site request forgery | Essential | Session | Best by Locals |
4. Local Storage and Session Storage
In addition to cookies, we use your browser's local storage and session storage to remember preferences and maintain your session. These are not cookies — they are not sent to our servers with every request — but we list them here for transparency:
| Item | Purpose | Duration |
|---|---|---|
| cookie_consent | Remembers your cookie consent choice (accept or decline) | Persistent |
| Location preference | Remembers your selected market (e.g., St. Simons Island, GA) | Persistent |
| Session ID | Anonymized session tracking for our own analytics (sessionStorage — cleared when you close the tab) | Tab session |
5. Third-Party Cookies
- Google Analytics 4: Helps us understand how visitors interact with our website. Google may process data outside the EEA. When analytics consent is denied, GA4 uses cookieless pings with statistical modeling instead. Google Privacy Policy
- Cloudinary: Delivers and optimizes listing images. Cloudinary does not set tracking cookies on our site. Cloudinary Privacy Policy
- Stripe: Processes business subscription payments. Stripe may set its own cookies on payment pages for fraud prevention. Stripe Privacy Policy
6. Your Choices
Our Consent Banner
If you are visiting from the European Economic Area (EEA), United Kingdom, or Switzerland, you will see a consent banner when you first visit. Analytics cookies are not set unless you click "Accept cookies." If you decline, Google Analytics runs in cookieless mode and uses statistical modeling — no tracking cookies are placed on your device.
You can change your choice at any time by clearing your browser's local storage for this site, which will cause the banner to appear again on your next visit.
Browser Settings
You can also control cookies through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Note: Blocking essential cookies (authentication, CSRF) will prevent you from signing in or using features that require an account.
7. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how websites should respond to DNT. We do not currently alter our data collection practices in response to DNT signals, but our consent banner provides EEA visitors with explicit control over analytics cookies.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices or applicable laws. When we do, we will update the "Last updated" date at the top. We encourage you to review this policy periodically.
9. Contact Us
If you have questions about our use of cookies, contact us at: privacy@bestbylocals.com
© 2026 Best by Locals. All rights reserved.