This Cookies Policy explains how Hot Pilot OOD (HotPilot Ltd), UIC 208812339, registered office at 64 Lev Tolstoy, ent. V, fl. 3, ap. 44, Sofia, Bulgaria ("we", "us", "our") uses cookies and similar technologies on hotpilot.ai and on the booking and management interfaces of the HotPilot platform (the "Site"). Read it together with our Privacy Policy.

Data protection officer: Hristo Aleksandrov · [email protected] · +359 894 622 720. For any request about your data, write to [email protected].

1. What cookies are

A cookie is a small text file placed on your device when you visit a website. It lets the site recognise your device, remember preferences and measure usage. We also use related technologies — pixels, local storage, session storage and similar identifiers. This Policy calls all of them "cookies".

2. Cookies we set ourselves

These are first-party cookies, set by hotpilot.ai and by the hotel websites running on the platform.

Name	Purpose	Lifetime	Consent
`cookie_consent`	Remembers the choice you made in the cookie banner, so we do not ask again	12 months	Not required
Session cookie	Keeps you signed in and protects forms against cross-site request forgery	Until you close the browser	Not required
`hp_selected_dates`	Carries the dates and room you chose through the booking steps	Session	Not required
`hp_tz`	Your time zone, so arrival and departure times display correctly	Session	Not required
`regional_variant`	Remembers the language and regional version you are viewing	12 months	Not required
`hp-sc` (session storage)	The state of the sales chat on hotpilot.ai for this tab: whether the panel is open, whether the teaser was shown, how many pages you viewed in this tab and whether the reminder was shown	Until you close the tab	Not required
`hp_visitor_id`	A pseudonymous identifier used to measure how the site is used — which pages, in what order, and whether a visit ends in a booking	12 months	Analytics consent
`hp_gm_visitor`	Identifies a visitor across a promotional game or campaign, so a prize cannot be claimed twice	12 months	Analytics consent

3. Cookies set by others

These are set only after you accept marketing cookies. Each provider is an independent controller for its own processing — their own policies apply in addition to this one.

Provider	Cookies	Purpose
Google (Analytics 4, Ads)	`_ga`, `_gid` and related	Traffic measurement and campaign attribution
Meta	`_fbp`, `_fbc`	Advertising measurement and audiences
TikTok	`_ttp`	Advertising measurement
Reddit	`rdt_uuid`, `rdt_cid`	Advertising measurement
Snap	`_scclid`	Advertising measurement
Pinterest	`_epik`	Advertising measurement
LinkedIn	`li_sugr`, `bcookie`	Advertising measurement

On hotpilot.ai: Google reCAPTCHA sets _GRECAPTCHA on our contact and demo-request pages, and in the sales chat once you start filling in one of its forms — not when you merely open the chat. It tells people from automated spam, is strictly necessary for those forms, and lasts up to six months.

Not every provider is active on every site. A hotel using the platform chooses which of these it enables, and the banner on that site reflects its own selection.

4. Legal basis

Storing a cookie on your device, or reading one from it, is governed by the ePrivacy Directive as transposed into Bulgarian law, and the data that follows is governed by the GDPR.

The cookies in section 2 marked "not required" are exempt from consent, because they are strictly necessary to deliver the service you asked for. Without them you cannot sign in, complete a booking, or have the site remember that you already answered the banner.
Everything else — analytics and marketing — is set only after you consent, and nothing in those categories loads before you choose.

5. Your choice, and how we record it

You can change or withdraw your choice at any time through the "Cookie preferences" link in the footer. Withdrawing is as easy as giving — the same panel, the same two clicks — and it takes effect immediately for everything that has not already happened.

When you make a choice we keep a record of it: the time, which categories you accepted, the version of this Policy you were shown, and the text of the banner as it appeared to you. This is how we are able to demonstrate that consent was given, which Article 7(1) GDPR requires of us. A withdrawal is stored as a new record rather than by overwriting the old one, so the history stays honest. We deliberately do not store your IP address in this record — the timestamp and a pseudonymous identifier already prove the choice, and an IP address would make the record more identifying than the tracking it exists to justify.

You can also delete or block cookies in your browser settings, though doing so may break parts of the Site. Some advertising providers offer their own opt-outs, for example at youronlinechoices.eu.

6. How long we keep the data

The lifetimes above are how long each cookie stays on your device. The data collected through analytics cookies is kept for 13 months and then deleted. Consent records are kept for as long as we may need to demonstrate the choice, and are covered by our retention schedule like every other record.

7. Changes

We update this Policy whenever we add, remove or change a cookie. The "Last updated" date at the top reflects the current version, and the version you consented to is stored with your consent record.

8. Contact

Questions about cookies or about your data: [email protected].

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592 · [email protected] · cpdp.bg. You do not have to contact us first.

Sell.

Serve.

Scale.

И многое другое

Cookies Policy