Storage & Tracking Disclosure

Cookie & Storage Policy

Last Updated: September 2026 | Transparent disclosure of cookies, tokens, and offline caching mechanisms.

1. What Are Cookies and Web Storage?

Cookies are small text files placed on your computer or mobile device by websites that you visit. In addition to cookies, modern web applications utilize browser Web Storage (such as localStorage) and Service Worker caches to provide offline support, secure authentication, and faster page load speeds.

2. Categories of Storage We Use

Essential Authentication Cookies (Strictly Necessary)

These cookies are mandatory for the application to function. They store encrypted session tokens allowing you to sign in, remain logged in between page visits, and securely communicate with our backend APIs without re-entering credentials on every click.

Identifiers: sb-*-auth-token, sb-*-refresh-token

Zero-Trust Role Validation Cookie (Security)

To protect administrative, homestay, and resort operator portals from unauthorized access, our Edge Proxy maintains a cryptographically verified, httpOnly, secure cookie representing your verified account role. Because it is marked httpOnly, malicious third-party browser scripts cannot inspect or manipulate it.

Identifier: mvba_user_role (HttpOnly, Secure, SameSite=Lax)

Client-Side Local Storage (Offline Boarding Passes & Preferences)

Because cellular signals can be intermittent during boat rides across Lianga Bay and Bretania, our PWA utilizes device localStorage to store your confirmed Digital Boarding Passes. This ensures that you can open and present your scannable QR pass to boat dispatch staff and host check-in desks even while completely offline.

Keys: mvba_offline_boarding_passes, mvba_tourist_wishlist

3. Do We Use Third-Party Advertising Cookies?

No. The Panaw platform does not sell personal data, display third-party commercial advertisements, or employ tracking pixels for commercial advertising networks. We use only functional utilities, such as OneSignal for opt-in browser push notifications regarding your booking approvals and weather advisories.

4. How to Control or Delete Cookies

You can control and manage cookies through your browser settings. However, disabling essential session cookies will prevent you from signing into your account, submitting bookings, or viewing your reservations.

To clear your offline boarding passes and cached data, you may clear your browser site data for this domain or log out of your session.