Cookies on Hobber
We use cookies to measure how the site is used and to measure and improve our advertising, but only if you say yes. Strictly necessary cookies are always on, because they are what make the site work. Cookie Policy
Legal
What Hobber stores in your browser, and why.
Version 1.1 · Effective date set at publish · Market United Arab Emirates · Issued by Hobber Advertising LLC Supersedes: version 1.0
This is the version published for United Arab Emirates.
This policy explains the cookies and similar technologies we use on our web surfaces, what each one is for, how long it lasts, who provides it, and how you control it. It is a notice. You do not sign it. Your choices are made in the cookie banner, not here.
Two things are true of every non essential technology described below. We ask first. You can change your answer at any time.
This policy covers the web surfaces we operate:
The Hobber consumer app and the Vendor App do not use cookies. Mobile apps work differently: they use device identifiers and software development kits provided by other companies. Those are described in the Privacy Policy, section Cookies and tracking, and not here.
If you use Hobber AI in the Hobber app, what happens to your conversations is covered by the AI Consent, which is a separate notice you agree to separately.
This policy sits under the Privacy Policy. The Privacy Policy explains what Personal Data we hold, why we hold it, who receives it, and the rights you have. See the Privacy Policy, section Your rights and how to use them.
This policy is published in Arabic and in English for United Arab Emirates. Nothing in the English text limits a right you have under the laws of the United Arab Emirates.
A cookie is a small file a website asks your browser to keep. The browser sends it back on your next page or your next visit, so the site can recognise the same browser.
We also use technologies that are not cookies but do similar work:
In this policy the word cookie covers all of these unless we say otherwise.
Some of these are set by us. Some are set by other companies whose tools we load on our pages. Both kinds are listed below.
We sort everything we set into four categories.
| Category | What it means | Do we ask first? |
|---|---|---|
| Strictly necessary | Without it the surface does not work or is not safe. Signing in, staying signed in, keeping your session safe, and remembering the choice you made about cookies. | No. These are always on. They cannot be switched off and still leave a working site. |
| Preferences | Remembers a choice you made yourself, such as your language, your theme, or whether a side menu is open. | No. These only record a decision you have already taken, and they are set when you take it. |
| Analytics | Counts visits, measures which pages and features are used, and helps us find what is broken. | Yes. Nothing in this category is set until you agree. |
| Marketing | Measures what our advertising leads to, records which campaign or link brought you to us, and lets advertising platforms show you relevant advertising. | Yes. Nothing in this category is set until you agree. |
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data does not have a general balancing ground of the kind some other data protection laws use. We cannot set an analytics or a marketing technology simply because we find it useful. We can only set one if you agree to it first, and we must be able to show that you did. That is why the two optional categories in the tables below are switched off until you switch them on.
The tables give the name, who provides it, the provider's country, what it does, how long it lasts, and its category.
Hobber is Hobber Advertising LLC, United Arab Emirates. Information sent to us is stored in AWS ap-south-1 (Mumbai, India).
| Name | Kind | Purpose | Lifetime | Category |
|---|---|---|---|---|
hobber_session |
Cookie | Keeps you signed in to your account. It cannot be read by scripts on the page. | A number of days set in our configuration | Strictly necessary |
hobber.device-id |
Local storage | A random identifier for this browser. It tells us whether a phone sign in is coming from a browser we have seen before, which decides whether we send an extra code by email. It holds nothing about your machine. | Until you clear your browser storage | Strictly necessary |
hobber.consent.v1 |
Local storage | Your cookie choice: which categories you allowed and when you chose. Without it we would have to ask you on every page. | Until you clear your browser storage | Strictly necessary |
hobber_preview_token and __prerender_bypass |
Cookie | Lets a Hobber marketing employee preview a page before it is published. They are never issued to a public visitor. | Until the preview ends, and at most until the browser is closed | Strictly necessary |
hobber_site_access and hobber_site_mode |
Cookie | Let a member of the Hobber team into a version of the site that is not yet open to the public, and tell the page it is that version. They are never set on the public site. | Until the browser is closed, and at most 12 hours | Strictly necessary |
hobber_analytics_anonymous_id |
Local storage | A random identifier for this browser so that we can count a returning visit without knowing who you are. | Until you clear your browser storage | Analytics |
hobber_analytics_session |
Session storage | Groups the pages you open in one tab into a single visit. | Until you close the tab | Analytics |
hobber.attribution.first |
Local storage | The first campaign, advertisement or shared link that brought you to us, so we can tell which of our marketing works. | 30 days | Marketing |
hobber.attribution.last |
Local storage | The most recent campaign, advertisement or shared link that brought you to us. | 30 days | Marketing |
hobber.attribution.session_source |
Session storage | Whether this visit arrived from a search, an advertisement, a shared link or an app link. | Until you close the tab | Marketing |
hobber.partner.referralToken |
Local storage | A referral code from a Hobber partnerships contact, so that a business sign up is credited to the right person. | 30 days | Marketing |
hobber.careers.campaign |
Session storage | The hiring campaign a careers link named, so that an application you send is credited to it. | Until you close the tab | Marketing |
These load only when the matching category is allowed, with two exceptions. The Google and Firebase sign in rows load only if you choose to sign in with Google or Apple. Google's own measurement tag (GA4) loads before you choose, under the refusal described in section 6.4: until you allow Analytics it sets no cookie and stores nothing, and sends Google only a ping with no identifier for each page.
| Name | Provider | Provider country | Purpose | Lifetime | Category |
|---|---|---|---|---|---|
| Google Tag Manager cookies | United States | Loads and manages the measurement and advertising tags we have configured. What it sets depends on the tags inside it. | Set by each tag inside the container | Analytics and Marketing | |
GA4 cookies, including _ga and _ga_ followed by the measurement id |
United States | Measures visits, page views and which Experiences are looked at. | _ga up to two years, by Google's own setting |
Analytics | |
Meta Pixel cookies, including _fbp and _fbc |
Meta | United States | Measures what our advertising on Meta services leads to, and supports remarketing. | _fbp about 90 days, by Meta's own setting |
Marketing |
| TikTok Pixel cookies and storage | TikTok | Singapore and United States | Measures what our advertising on TikTok leads to. | Set by TikTok, see its notice | Marketing |
| Snapchat Pixel cookies and storage | Snap | United States | Measures what our advertising on Snapchat leads to. | Set by Snap, see its notice | Marketing |
| X Pixel cookies and storage | X Corp | United States | Measures what our advertising on X leads to. | Set by X Corp, see its notice | Marketing |
| Reddit Pixel cookies and storage | United States | Measures what our advertising on Reddit leads to. | Set by Reddit, see its notice | Marketing | |
| Google sign in popup cookies and storage | United States | Completes a sign in when you choose Continue with Google. It is set on Google's own sign in address. | Set by Google, see its notice | Strictly necessary for that sign in | |
Firebase sign in storage (firebaseLocalStorageDb) |
United States | Holds a Google or Apple sign in you started on the website while it completes. It is removed as soon as the sign in completes. | Until the sign in completes | Strictly necessary for that sign in |
What the advertising pixels are told on an Experience page is the identifier, title and category of the Experience, its price and currency, and a one time reference that lets the platform recognise the same event only once. They are not told your name, your email address, your telephone number or your payment details.
The Vendor Dashboard and the Partner Dashboard are work tools for businesses that have an account with us. They carry no advertising technology at all. No pixel from Google, Meta, TikTok, Snap, X or Reddit runs on either of them.
| Name | Provider | Provider country | Purpose | Lifetime | Category |
|---|---|---|---|---|---|
hobber_session |
Hobber | United Arab Emirates | Keeps you signed in. It cannot be read by scripts on the page. | A number of days set in our configuration | Strictly necessary |
| Return path key | Hobber | United Arab Emirates | Remembers the page you were heading to when you were asked to sign in, so you land back there. | Until you close the tab | Strictly necessary |
| Side menu state, collapsed sections, listing section switches, Experience rail and units preference | Hobber | United Arab Emirates | Remembers how you have arranged the dashboard. | Until you clear your browser storage | Preferences |
hobber_analytics_anonymous_id |
Hobber | United Arab Emirates | A random identifier for this browser so we can measure how the dashboard is used. | Until you clear your browser storage | Analytics |
hobber.partner.referralToken |
Hobber | United Arab Emirates | A referral code from a Hobber partnerships contact. | 30 days | Marketing |
Google Maps cookies, including NID |
United States | Serves map tiles and protects the map service from misuse. Loaded only when you open a screen with a map. | Set by Google, see its notice | Strictly necessary for the map | |
| Google sign in popup cookies and storage | United States | Completes a sign in when you choose Continue with Google. | Set by Google, see its notice | Strictly necessary for that sign in |
| Name | Provider | Provider country | Purpose | Lifetime | Category |
|---|---|---|---|---|---|
hobber_session |
Hobber | United Arab Emirates | Keeps you signed in. It cannot be read by scripts on the page. | A number of days set in our configuration | Strictly necessary |
| Side menu state cookie | Hobber | United Arab Emirates | Remembers whether the side menu is open or closed. | A fixed period set in our configuration | Preferences |
| Theme key | Hobber | United Arab Emirates | Remembers whether you chose the light or the dark theme. | Until you clear your browser storage | Preferences |
hobber_analytics_anonymous_id |
Hobber | United Arab Emirates | A random identifier for this browser so we can measure how the dashboard is used. | Until you clear your browser storage | Analytics |
Google Maps cookies, including NID |
United States | Serves map tiles and protects the map service from misuse. Loaded only when you open a screen with a map. | Set by Google, see its notice | Strictly necessary for the map | |
| Google sign in popup cookies and storage | United States | Completes a sign in when you choose Continue with Google. | Set by Google, see its notice | Strictly necessary for that sign in |
The session cookies hobber_session and employee_session are strictly necessary. The first keeps a Customer, a Vendor User or a Hub Partner user signed in. The second is used only in the internal console our own staff work in, which is not a public surface and is not covered by the rest of this policy. Both are set by our servers, are not readable by scripts on the page, and are limited to our own address. Turning them off means you cannot stay signed in.
Both dashboards run our own measurement software. It is described in section 8 below. It is first party, it stays with us, and it is not shared with any advertising platform.
Google Maps is loaded on demand. It appears only on the screens that show a map, such as setting the location of an Experience or drawing the boundary of a venue. When it loads, Google receives the request, including the internet address your connection is using. If you do not open a screen with a map, Google Maps is never loaded.
The first time you arrive on the website you see a cookie banner with three doors:
Refusing is as easy as accepting. Both buttons sit on the first screen of the banner, they are the same size and they take the same number of taps. Neither switch in Manage is ticked in advance.
Until you choose, no analytics technology and no marketing technology is set, and none is loaded except Google's measurement tag, which runs under a refusal and sets nothing (section 6.4). Strictly necessary items still work, because without them the site cannot sign you in or remember the answer you are about to give.
Every page of the website carries a Cookie choices link in the footer. It opens the same panel, shows what you chose last time, and lets you change it.
A change takes effect immediately. You do not need to reload the page. If you turn Marketing off, the advertising tags are removed from the page and stop sending anything. If you turn Analytics off, we stop measuring your visit.
Withdrawing a consent does not make what happened before it unlawful. It stops the processing from that moment on.
Your choice is remembered in the browser you made it in. If you clear your browser storage, or use a different browser or a different device, we ask you again.
Your browser has its own controls. You can usually block cookies, delete cookies, clear local storage, and use a private window that forgets everything when you close it. Where to find these depends on your browser, and its own help pages are the best guide.
Blocking strictly necessary cookies is possible but it will break things. You will not be able to sign in or stay signed in, and the dashboards will not work.
Google's tools on the website run under Google Consent Mode. This means we pass your answer to those tools as a signal, covering whether they may use storage for measurement, whether they may use storage for advertising, and whether advertising data and advertising personalisation are allowed. Until you agree, the signal we pass is a refusal, and Google's tools are told not to use storage for measurement or for advertising. Under that refusal Google's tag still loads and sends Google a ping for each page, with no cookie, no identifier for you or your browser and no advertising click identifier. Google uses those pings to estimate, in total and never for one person, how many visits it could not measure. If you allow Analytics or Marketing, the signal changes on the spot and Google's tools may then use storage for what you allowed.
If you refuse, the site still works. You can browse, search, read an Experience page, book, pay, sign in, manage your account and use the dashboards exactly as before. No feature is withheld and no price changes.
What changes is this. No analytics technology and no advertising technology is set. Our own measurement does not count your visit, and Google's tag sends only the pings with no identifier described in section 6.4. Advertising platforms are not told that you looked at an Experience. We do not record which campaign or link brought you here.
You may still see Hobber advertising on other services. It just will not be selected using anything we learned about you on our site.
Agreeing is never a condition of making a Booking, of holding an account, or of using the Vendor Dashboard or the Partner Dashboard.
We load a small number of tools made by other companies. Each one is a separate company that decides for itself what it does with what it receives. Their own notices explain that. The list below is the complete set that can run on our web surfaces.
| Provider | What we load | Provider country | Category | Where to read their notice |
|---|---|---|---|---|
| Google Tag Manager, GA4, Google Maps, Google sign in | United States | Analytics, Marketing, and Strictly necessary for maps and sign in | https://policies.google.com/technologies/cookies | |
| Meta | Meta Pixel | United States | Marketing | https://www.facebook.com/privacy/policy |
| TikTok | TikTok Pixel | Singapore and United States | Marketing | https://www.tiktok.com/legal/page/row/privacy-policy/en |
| Snap | Snapchat Pixel | United States | Marketing | https://snap.com/en-US/privacy/privacy-policy |
| X Corp | X Pixel | United States | Marketing | https://x.com/en/privacy |
| Reddit Pixel | United States | Marketing | https://www.reddit.com/policies/privacy-policy |
Loading any of these sends information to a country outside United Arab Emirates. How we handle information that leaves United Arab Emirates is explained in the Privacy Policy, section International transfers.
We publish which of these advertising tags are switched on from our own console, so the set can change without a change to our software. If we switch on a tag that is not listed above, we update this policy and ask for your consent again before it runs. We do not add a new category without asking you again.
We run our own measurement software on the website and in both dashboards. It is a category of its own, because it is not a product bought from anybody and nothing it collects is sent to an advertising platform.
What it records is: a random identifier for the browser, a visit identifier, the page you are on, the page you came from, the language your browser is set to, the time, and a short description of what happened, such as a page being opened or a button being pressed.
What it does not record is: your name, your email address, your telephone number, your payment details or your exact location. It does not record your internet address against these events. It does not build an advertising profile and it is not sold or shared for advertising.
If you are signed in, our servers add your account identifier to the event so we can support you and investigate a problem you report. If you are not signed in, the event carries no account identifier at all.
Our own analytics on the website sits in the Analytics category. It is set only if you agree.
In the Vendor Dashboard and the Partner Dashboard, the same software measures how the business tools are used, so we can improve them. What we do with those records, and the rights you have over them, are explained in the Vendor Privacy Policy, section How long we keep it, and in the Vendor Privacy Policy, section Your rights and how to use them.
How long we keep the records this software produces is explained in the Privacy Policy, section How long we keep it. This policy covers only what is set in your browser and for how long.
When you make a choice in the banner we record it, because we have to be able to show what you agreed to.
The record contains:
It does not contain your name, your email address or your payment details.
If you are signed in to your Hobber account when you make or change your choice, or you sign in afterwards, we also record your Marketing and Analytics answer against your account, because it decides whether we report your sign-up, your Orders and your Refunds to advertising platforms (Privacy Policy, section Cookies and tracking). That record is kept like the account's other consent records.
We keep a consent record for 5 years from the date of the choice or from the date you changed it, whichever is later. We keep it for one purpose only, which is to prove what you were shown and what you chose.
The same record is kept in your browser so that the site knows your answer without having to ask again.
Hobber operates the Platform for the Markets listed in the Market Schedule. We do not direct the Platform at the European Union or at the United Kingdom, and we do not offer Experiences there.
If you reach our website from anywhere else in the world, you get the same three doors and the same two switches, and the same rule applies: nothing in the Analytics category and nothing in the Marketing category is set until you agree to it.
We publish a new version of this policy whenever what we use changes. The version number and the effective date are at the top of this page, and each Market has its own published version.
If a change is material, for example a new category or a new company receiving information about you, we publish the new version at least 15 days before it takes effect, and we ask you for your consent again before the new technology runs. A correction that does not change what we do takes effect when it is published.
Earlier versions are kept, so we can always show which text was in force on a given date.
This is version 1.1. It lists the storage the website actually uses (section 4.1: no language cookie, and the preview, team access and careers entries), says that Google's measurement tag loads before you choose and what it sends while you have not agreed (sections 4.2, 6.1, 6.4 and 6.5), names the Firebase sign in storage (section 4.2), and says that a signed-in customer's answer is also recorded against their account (section 9). Nothing in what we ask you, or in what is set before you agree, changed from version 1.0, the first version published for United Arab Emirates.
| Company | Hobber Advertising LLC |
| Address | Madinet Zayed Office Tower, Abu Dhabi, United Arab Emirates |
| Commercial licence | Commercial licence CN-3761457, Abu Dhabi Department of Economic Development |
| Tax registration number | TRN 104317953800003 |
| Privacy questions | privacy@hobber.ai |
| Anything about a Booking or your account | the support chat in the Hobber app |
Write to us at privacy@hobber.ai about anything in this policy, including a request to see, correct or delete Personal Data we hold about you.
You can also complain to the data protection authority for United Arab Emirates, which is the UAE Data Office. See the Privacy Policy, section Your rights and how to use them, for how those rights work and what we will do when you use one.