Cookie Notice

This notice lists every cookie and similar technology that SPR Software Ltd, trading as AgentHub, uses on AgentHub — the platform at agenthub.travel, the agency websites it hosts, and the quote, booking and enquiry pages it serves.

We use only strictly necessary cookies. Each one exists to sign you in, keep you signed in, or show you the page you just submitted. None is used for analytics, advertising or tracking across sites, so no consent banner is shown: under the Privacy and Electronic Communications Regulations these cookies may be set without consent. We still list them here so you know what they are.

Cookies we set

Cookie	What it does	How long it lasts
__Secure-better-auth.session_token	Keeps an agency user signed in to the workspace. Holds a signed session token, nothing else.	14 days from sign-in when "Keep me signed in" is ticked; otherwise until the browser is closed.
__Secure-better-auth.dont_remember	Records that "Keep me signed in" was left unticked, so the session ends with the browser.	Until the browser is closed.
client_gate_session	Lets a traveller who has opened a secure link, or entered an emailed code, see their agency's quotes, passenger-details form and booking pages without signing in.	90 days when opened from the emailed link, or when "Keep me signed in on this device for 90 days" is left ticked after entering a code; until the browser is closed if that box is unticked.
enquiry_completion	Shows the "thank you" message after an enquiry form is submitted. Set only on /forms pages.	10 minutes.
quote_acceptance	Shows the confirmation after a quote is accepted. Set only on /quotes pages.	10 minutes.
passenger_details_completion	Shows the confirmation after passenger details are submitted. Set only on /bookings pages.	10 minutes.
site_enquiry_completion	Shows the "thank you" message after the enquiry form on a hosted agency website is submitted. Set only on that website's address.	10 minutes.

Every cookie above is marked HttpOnly (scripts cannot read it), SameSite=Lax (it is not sent on cross-site requests) and Secure (it is only sent over an encrypted connection).

Browser storage

The workspace keeps one value in your browser's local storage, tas:desktop-nav-collapsed, to remember whether you collapsed the sidebar. It never leaves your browser.

Third parties

• Cloudflare Turnstile. Public enquiry forms may show a Cloudflare Turnstile challenge to block automated submissions. When it is enabled, Cloudflare runs a script and frame from challenges.cloudflare.com and may store its own challenge token there. See Cloudflare's privacy policy.
• Stripe. Payments and subscription management happen on Stripe's own pages (checkout.stripe.com, billing.stripe.com). Stripe sets its own cookies on those pages, not on ours. See Stripe's cookie policy.
• No analytics, no advertising, no web fonts from third parties. We self-host our fonts, so opening a page does not send your address to a font provider.

Agency websites and custom domains

Websites that agencies host through AgentHub — on a platform subdomain or on an agency's own domain — are served by the same application and set only the cookies listed above. An agency may embed its own third-party content; that agency is responsible for it and for its own cookie notice.

Managing cookies

You can delete or block cookies in your browser's settings. Because every cookie we set is strictly necessary, blocking them will stop you signing in or completing forms.

Changes

Each version carries an effective date at the top of this page. We update this notice whenever a cookie is added, removed or changed.