Cookie Policy

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit our website. They contain information about your browsing activity and preferences, helping us provide a better user experience and improve our vacation rental management platform.

Cookies cannot harm your device or files. They are widely used across the internet to make websites work more efficiently and provide personalized experiences for users.

Sommer uses cookies for several important purposes:

• To keep you logged in to your account during your session
• To remember your preferences and settings across visits
• To ensure the security and proper functioning of our platform
• To analyze how our platform is used and improve performance
• To prevent fraud and enhance platform security
• To provide customer support and troubleshoot issues

Cookies can be categorized in different ways:

By Duration:

• Session Cookies: Temporary cookies that are deleted when you close your browser
• Persistent Cookies: Remain on your device for a set period or until manually deleted

By Source:

• First-Party Cookies: Set directly by Sommer's website
• Third-Party Cookies: Set by external services we use (like authentication or analytics)

We work with trusted third-party service providers who may set cookies to provide essential services:

• UploadThing: File upload and image management services
• Auth.js/OAuth Providers: Authentication and identity services (Google, GitHub)
• Vercel: Hosting and content delivery network services
• Resend: Email delivery and communication services

These providers are bound by data processing agreements and follow strict privacy standards. Their cookies are used only for the specific services they provide to Sommer.

When you use social login features, the respective social media platforms may set cookies:

• Google: For Google OAuth authentication
• GitHub: For GitHub OAuth authentication

These cookies are governed by the respective platforms' privacy policies. We do not control or have access to these cookies beyond the authentication information necessary for account creation.

Our authentication system uses Auth.js which may set additional cookies for:

• Secure session management across devices
• Single sign-on (SSO) functionality
• Account security and fraud prevention
• Cross-site request forgery (CSRF) protection

Under the General Data Protection Regulation (GDPR), we use different legal bases for different types of cookies:

• Essential Cookies: Legitimate interest for platform functionality and security
• Functional Cookies: Consent provided through continued platform use
• Analytics Cookies: Explicit consent obtained through cookie preferences
• Third-Party Cookies: Consent for specific services (authentication, file uploads)

We obtain and manage your consent for non-essential cookies through:

• Clear information about cookie purposes and data processing
• Granular consent options for different cookie categories
• Easy withdrawal of consent through browser settings
• Regular consent refresh for long-term users
• Respect for Do Not Track signals where technically feasible

For essential cookies, we rely on legitimate interests, which include:

• Ensuring platform security and preventing fraud
• Providing core vacation rental management functionality
• Maintaining user sessions and preferences
• Debugging and fixing technical issues
• Complying with legal and regulatory requirements

We may update this Cookie Policy to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify users through email if they have accounts with us
• Display prominent notices on our platform for significant changes
• Provide at least 30 days' notice for material changes affecting your rights

Policy updates become effective:

• Immediately for technical updates and bug fixes
• 30 days after notification for material changes
• Upon your next login for account-specific changes
• As required by law for compliance-related updates

We maintain a record of significant policy changes. Previous versions of this Cookie Policy are available upon request through our privacy team at privacy@sommer.co.