Legal
Cookies and local storage
Updated 12 October 2026
This page is a plain language draft and still needs legal review.
No advertising or analytics cookies
Hilalstay does not use advertising or analytics cookies. Essential cookies support sign-in and security. Optional journey plans are saved on your device only when you choose Save.
Preferences in local storage
Local storage remembers motion, currency and nationality preferences. The planner stores your destination, dates, party details and shortlist only after you choose Save. Delete the plan using its delete control or clear site data in your browser. Saved account stays are stored on the server and are managed separately in Your Hilalstay.
Checkout details in session storage
During checkout, the guest names and contact details you type are kept in your browser's session storage until the booking completes, so a page refresh does not lose them. They stay on your device and are cleared when you close the tab.
The payment form
When you pay, the payment form provided by our booking partner may set its own strictly necessary cookies so the payment can work securely. These exist only around the payment itself, and the payment form is the partner's, not ours.
Your choices
You can clear local storage at any time through your browser settings, and use the Pause all motion control on the site whenever you prefer a still page. If anything here looks wrong, write to hello@hilalstay.com, or to Mohamed Abdelhamid Abdalla Mohamed, 241 Church Road, Old St Mellons, Cardiff CF3 6YX, United Kingdom.
Sign-in cookies
The hs_member cookie maintains a member sign-in for up to 30 days. The hs_staff cookie expires after 4 hours. These cookies are HttpOnly and use Secure on HTTPS; signing out invalidates the session. One-time verification and reset codes expire after one hour.