Legal

Cookie policy

Last updated: 2026-05-29. This page explains in plain English what data Spalist stores in your browser, why, and how to control it.

The short version

Spalist uses minimal cookies. We don't run third-party ad networks. We don't sell your data. We don't share your browsing with affiliates. We use a small amount of first-party analytics to understand which guides are useful and a few essential cookies to remember things like your filter preferences.

What is a cookie?

A cookie is a small text file a website stores in your browser. It lets the site remember small pieces of information between visits — like which language you prefer or how many spas you've recently viewed. Cookies cannot read other files on your computer or run programs; they're passive storage.

Cookies we use

Strictly necessary

Required

Used to deliver core site functionality. The site cannot function without these and they are not optional. They never store personally-identifying information.

Filter preferences (e.g. last selected city / treatment / sort order)
Form-state cookies (so you don't lose progress if a form fails to submit)
Security cookies (CSRF protection on lead-submission endpoints)

Analytics

First-party, no personal IDs

Anonymous usage data so we know which guides are useful and which spas are over- or under-clicked. Aggregated only; no individual profiles are built.

Page-view counters per URL (no IP, no user identifier)
Click-through tracking on WhatsApp / Call buttons (so we can tell spas which channels are working)
Search query terms (aggregated only — we never see which IP searched what)

Functional

Optional

Convenience cookies that make repeat visits smoother. Disabling these doesn't break the site, just resets a few preferences.

Recently-viewed spa list (stored locally in your browser, never sent to our server)
Reading-mode preference (display preference for our guides)

Third-party scripts

We deliberately keep third-party scripts to a minimum. The only external services we currently load are:

Google Fonts — for the Playfair Display and Geist typefaces. Google logs the IP of the requesting browser per their privacy policy. No cookie is set by this.
Google Maps / Places imagery— when we serve real-photo spa imagery from Google Business, that image request goes through Google's CDN. Google may log the IP per their standard privacy policy.

We do not use: Google Analytics 4, Meta Pixel, TikTok Pixel, Hotjar, FullStory, Mouseflow, Segment, or any advertising-network cookies.

How to disable cookies

In your browser
Most browsers let you block cookies entirely or per-site. Look in Settings → Privacy → Cookies. Note: blocking all cookies will reset your filter preferences each visit.
Delete what's stored
You can clear all Spalist cookies from your browser at any time — in Chrome, Edge or Safari this is Settings → Privacy → Site data → getspalist.com → Remove.
Private / incognito mode
Browsing in private/incognito mode means no cookies persist between sessions. You'll still see all our content; you just won't keep filter preferences between visits.
Browser-level tracking protection
Browsers like Firefox, Brave and Safari have built-in tracker blocking. Our analytics are first-party, so even with strict tracker protection on, you'll still load Spalist normally.

Changes to this policy

If we change which cookies we use, we update this page with the new “Last updated” date. Material changes (e.g. adding a new third-party tracker) will be flagged at the top of the page for at least 30 days.

Questions

Send any privacy or cookie questions to hello@getspalist.com. We aim to respond within 5 business days.