Cookies and storage

Here you can see every cookie and every browser storage entry of these pages: what for, by whom and for how long.

Website

Last updated: 30 October 2026 · Responsible:

Necessary 1 entry : Always active

Booking, forms and security do not work without these, so they cannot be switched off; no consent is needed.

Necessary
Name	Type	Purpose	Provider	Duration	When set
`bookingsystem.cookies.marketing`	Local storage	Remembers that this notice has been read, and which version.		Until this list changes, at most 12 months	When “Got it” is clicked

Name: bookingsystem.cookies.marketing
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Preferences 2 entries : Only after your choice

Only stores what you set yourself, and only on your device.

Preferences
Name	Type	Purpose	Provider	Duration	When set
`bookingsystem.theme`	Local storage	The chosen appearance (light or dark).		Until deleted	When light or dark is chosen (“System” removes it)
`bookingsystem.site.langHint`	Session storage (tab)	The language hint stays closed after closing it.		Until the tab is closed	When the language hint is closed

Name: bookingsystem.theme
Purpose: The chosen appearance (light or dark).
Content: “light” or “dark”.
Type: Local storage
Duration: Until deleted
When set: When light or dark is chosen (“System” removes it)
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.site.langHint
Purpose: The language hint stays closed after closing it.
Content: The value “1”.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the language hint is closed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

App for businesses

Last updated: 30 October 2026

Necessary 16 entries : Always active

Necessary
Name	Type	Purpose	Duration	When set
`bookingsystem.cookies.app`	Local storage	Remembers that this notice has been read, and which version.	Until this list changes, at most 12 months	When “Got it” is clicked
`__Host-bs_app`	Cookie (HttpOnly, Secure, SameSite=Lax, host-only)	Keeps the sign-in alive and protects the requests against forgery.	120 minutes after the last activity	When the sign-in page opens
`remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d`	Cookie (HttpOnly, Secure, SameSite=Lax, host-only)	Signs in again on this device without entering the password again.	30 days	Only with “Stay signed in” when signing in
`Passkey of the account`	Passkey	Sign-in without a password.	Until deleted	Only when a passkey is set up
`bookingsystem.brand.<business>`	Local storage	The business’s colours, so the application looks right at once.	Until deleted	After signing in, when the business has its own colours
`bookingsystem.desk.last_input`	Local storage	Time of the last input, for the automatic lock across all tabs.	Until deleted	After signing in
`bookingsystem.device` `bookingsystem.device.seq`	Local storage	Random device number so inputs made without network arrive exactly once.	Until deleted	When the cleaning board is used
`bookingsystem.user.<user>.lastPlace` `bookingsystem.user.<user>.housekeeping.queue.<property>` `bookingsystem.user.<user>.housekeeping.queue.<property>.rejected` `bookingsystem.user.<user>.redemptions.queue.<property>` `bookingsystem.user.<user>.housekeeping.view.<property>` `bookingsystem.user.<user>.invoicing.view` `bookingsystem.user.<user>.timeline.firstUseHint`	Local storage	Where work was done last, queues for inputs made without network and own views.	Until sign-out	When the function is used
`bookingsystem.user.<user>.vault.emergency.<property>` `bookingsystem.user.<user>.vault.wrapped` `bookingsystem.user.<user>.vault.label` `bookingsystem.user.<user>.vault.kind` `bookingsystem.user.<user>.vault.tries`	Local storage	Encrypted copy of the evacuation list for an emergency without network.	Until sign-out	After signing in, when the business allows the copy on the device
`bookingsystem.user.<user>.vault.key`	Session storage (tab)	This tab’s key to open the emergency copy.	Until the tab is closed	After signing in, when the business allows the copy on the device
`bookingsystem-commands`	Browser database	Payments and other money commands are kept before sending so nothing is lost when the connection drops.	Until sign-out	When a money command waits to be sent
`/sw.js`	Service worker	Loads the application’s files without guest data, for the emergency list without network and for notifications.	Until the next version of the application or sign-out	When an offline PIN is set or notifications are turned on
`shell-<check value>`	Offline storage	The application’s files for the emergency list without network.	Until the next version of the application or sign-out	When an offline PIN is set or notifications are turned on
`Push subscription of this device`	Push subscription	Notifications on this device.	Until sign-out	When notifications are turned on and the browser asks
`bookingsystem.user.<user>.city-tax-amendment:*` `bookingsystem.emergency-ticks.<property>.<date>` `draft-carry:<random value>` `bookingsystem.token.<purpose>` `bookingsystem.stale-build-reload` `sso-return` `sso-confirm-popup`	Session storage (tab)	Unsent drafts, attendance ticks and one-time hand-overs in this tab.	Until the tab is closed	When the function is used
`tsr-scroll-restoration-v1_*`	Session storage (tab)	The scroll position when going back.	Until the tab is closed	When the page changes

Name: bookingsystem.cookies.app
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: __Host-bs_app
Purpose: Keeps the sign-in alive and protects the requests against forgery.
Content: A random session identifier; the session itself is kept encrypted on the server.
Type: Cookie (HttpOnly, Secure, SameSite=Lax, host-only)
Duration: 120 minutes after the last activity
When set: When the sign-in page opens
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR); Legitimate interest in secure operation (Art. 6 (1) (f) GDPR)

Name: remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d
Purpose: Signs in again on this device without entering the password again.
Content: An encrypted identifier of the account and a check value.
Type: Cookie (HttpOnly, Secure, SameSite=Lax, host-only)
Duration: 30 days
When set: Only with “Stay signed in” when signing in
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: Passkey of the account
Purpose: Sign-in without a password.
Content: A key in the password manager or security key of the device; the server only knows its public part.
Type: Passkey
Duration: Until deleted
When set: Only when a passkey is set up
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: bookingsystem.brand.<business>
Purpose: The business’s colours, so the application looks right at once.
Content: Colour values like #1A73E8.
Type: Local storage
Duration: Until deleted
When set: After signing in, when the business has its own colours
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.desk.last_input
Purpose: Time of the last input, for the automatic lock across all tabs.
Content: A timestamp.
Type: Local storage
Duration: Until deleted
When set: After signing in
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.device bookingsystem.device.seq
Purpose: Random device number so inputs made without network arrive exactly once.
Content: A random identifier and a counter.
Type: Local storage
Duration: Until deleted
When set: When the cleaning board is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.lastPlace bookingsystem.user.<user>.housekeeping.queue.<property> bookingsystem.user.<user>.housekeeping.queue.<property>.rejected bookingsystem.user.<user>.redemptions.queue.<property> bookingsystem.user.<user>.housekeeping.view.<property> bookingsystem.user.<user>.invoicing.view bookingsystem.user.<user>.timeline.firstUseHint
Purpose: Where work was done last, queues for inputs made without network and own views.
Content: The property opened last (name and page), inputs not yet sent and chosen views.
Type: Local storage
Duration: Until sign-out
When set: When the function is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.vault.emergency.<property> bookingsystem.user.<user>.vault.wrapped bookingsystem.user.<user>.vault.label bookingsystem.user.<user>.vault.kind bookingsystem.user.<user>.vault.tries
Purpose: Encrypted copy of the evacuation list for an emergency without network.
Content: Encrypted: the people present per property and the key protected by a PIN or password; plus the name on the unlock screen, the kind of lock and the number of failed attempts.
Type: Local storage
Duration: Until sign-out
When set: After signing in, when the business allows the copy on the device
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.vault.key
Purpose: This tab’s key to open the emergency copy.
Content: A key, only in this tab.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: After signing in, when the business allows the copy on the device
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem-commands
Purpose: Payments and other money commands are kept before sending so nothing is lost when the connection drops.
Content: Commands not yet confirmed, with amount and purpose.
Type: Browser database
Duration: Until sign-out
When set: When a money command waits to be sent
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: /sw.js
Purpose: Loads the application’s files without guest data, for the emergency list without network and for notifications.
Content: The program that keeps the application’s files ready.
Type: Service worker
Duration: Until the next version of the application or sign-out
When set: When an offline PIN is set or notifications are turned on
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: shell-<check value>
Purpose: The application’s files for the emergency list without network.
Content: Program files of the application, no guest data.
Type: Offline storage
Duration: Until the next version of the application or sign-out
When set: When an offline PIN is set or notifications are turned on
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: Push subscription of this device
Purpose: Notifications on this device.
Content: The address of the browser’s notification service.
Type: Push subscription
Duration: Until sign-out
When set: When notifications are turned on and the browser asks
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: bookingsystem.user.<user>.city-tax-amendment:* bookingsystem.emergency-ticks.<property>.<date> draft-carry:<random value> bookingsystem.token.<purpose> bookingsystem.stale-build-reload sso-return sso-confirm-popup
Purpose: Unsent drafts, attendance ticks and one-time hand-overs in this tab.
Content: Inputs not yet saved and one-time values.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the function is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: tsr-scroll-restoration-v1_*
Purpose: The scroll position when going back.
Content: Scroll positions per page.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the page changes
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Preferences 3 entries : Only after your choice

Preferences
Name	Type	Purpose	Duration	When set
`bookingsystem.theme` `bookingsystem.density` `bookingsystem.contrast` `bookingsystem.locale` `bookingsystem.workStyle` `bookingsystem.startPage` `bookingsystem.sidebarRail` `bookingsystem.navCollapsed` `bookingsystem.timeline.collapsed` `today.week` `drawer-section:<identifier>`	Local storage	Appearance, language, work style and layout that were chosen.	Until deleted	When the setting is changed
`frontdesk.released.dismissed` `bookingsystem.bankChangesSeen` `bookingsystem.playground.dismissed`	Local storage	A closed notice stays closed.	Until deleted	When the notice is closed
`payments.reader.<property>`	Local storage	The card terminal this device used last.	Until deleted	When a terminal is chosen

Name: bookingsystem.theme bookingsystem.density bookingsystem.contrast bookingsystem.locale bookingsystem.workStyle bookingsystem.startPage bookingsystem.sidebarRail bookingsystem.navCollapsed bookingsystem.timeline.collapsed today.week drawer-section:<identifier>
Purpose: Appearance, language, work style and layout that were chosen.
Content: The chosen values, such as “compact”, collapsed areas or the start page.
Type: Local storage
Duration: Until deleted
When set: When the setting is changed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: frontdesk.released.dismissed bookingsystem.bankChangesSeen bookingsystem.playground.dismissed
Purpose: A closed notice stays closed.
Content: The identifier of the notice.
Type: Local storage
Duration: Until deleted
When set: When the notice is closed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: payments.reader.<property>
Purpose: The card terminal this device used last.
Content: The identifier of the terminal.
Type: Local storage
Duration: Until deleted
When set: When a terminal is chosen
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Platform console

Last updated: 30 October 2026

Necessary 3 entries : Always active

Necessary
Name	Type	Purpose	Duration	When set
`bookingsystem.cookies.platform`	Local storage	Remembers that this notice has been read, and which version.	Until this list changes, at most 12 months	When “Got it” is clicked
`__Host-bs_platform`	Cookie (HttpOnly, Secure, SameSite=Strict, host-only)	Keeps the sign-in alive and protects the requests against forgery.	Until the browser is closed, at most 8 hours; signed out after 30 minutes without activity	When the sign-in page opens
`Passkey of the account`	Passkey	Sign-in without a password.	Until deleted	Only when a passkey is set up

Name: bookingsystem.cookies.platform
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: __Host-bs_platform
Purpose: Keeps the sign-in alive and protects the requests against forgery.
Content: A random session identifier; the session itself is kept encrypted on the server.
Type: Cookie (HttpOnly, Secure, SameSite=Strict, host-only)
Duration: Until the browser is closed, at most 8 hours; signed out after 30 minutes without activity
When set: When the sign-in page opens
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR); Legitimate interest in secure operation (Art. 6 (1) (f) GDPR)

Name: Passkey of the account
Purpose: Sign-in without a password.
Content: A key in the password manager or security key of the device; the server only knows its public part.
Type: Passkey
Duration: Until deleted
When set: Only when a passkey is set up
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Preferences 1 entry : Only after your choice

Preferences
Name	Type	Purpose	Provider	Duration	When set
`bookingsystem.theme` `bookingsystem.contrast` `bookingsystem.locale`	Local storage	Appearance, high contrast and language on this device.		Until deleted	When chosen in the settings

Name: bookingsystem.theme bookingsystem.contrast bookingsystem.locale
Purpose: Appearance, high contrast and language on this device.
Content: The chosen values, such as “dark” or “en”.
Type: Local storage
Duration: Until deleted
When set: When chosen in the settings
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

The browser also uses the usual techniques to load and secure the page (cache, HTTPS policy). They are not used to recognise anyone.

Privacy notice