Cookie policy

Keep you signed in, remember your language and currency, and prevent CSRF. These can’t be turned off because the site stops working without them.

• siru_session — session identifier, HttpOnly, Secure, SameSite=Lax, 30 days
• siru_locale — language + currency, 1 year
• siru_csrf — form-submission guard, session

Remember your sign-in name on this device so we can show “Continue as [Name]” on your next visit, and load Google’s One Tap helper which lets you sign in inline if you’re already in your Google account in another tab. If you skip consent, you’ll see the generic “Save your trip” button instead. Sign-in still works either way.

• siru_auth_hint— your display name + chosen OAuth provider (Google or Apple). Display-only; it cannot sign you in. 13 months, refreshed on each sign-in. Cleared with the “Not you?” link.
• g_state, g_csrf_token— set by Google’s One Tap script (accounts.google.com) when the helper is loaded. Lifetime managed by Google; see Google’s cookie policy.
• Dark/light mode and dismissed banners are stored in localStorage and can be cleared any time from your browser.

We use Google Analytics to measure site usage. Analytics storage is controlled by your analytics choice. Microsoft Clarity loads only after analytics consent and helps us understand interactions with the site, including through session recordings and heatmaps.

Google tags load with Consent Mode. When consent is denied, they may send cookieless measurement signals to Google; this does not mean that no data is sent. Learn more in Google’s partner-site privacy information and the Microsoft Privacy Statement.

Your marketing choice controls Google advertising storage and advertising consent signals. With marketing consent, we also load Microsoft Advertising UET to measure advertising visits and purchases. It may use advertising cookies and identifiers. Our Microsoft purchase event contains an order reference, amount and currency.

Use Manage cookies to withdraw consent or change your choices. Microsoft receives an updated consent signal when you withdraw marketing consent, and we stop sending custom purchase events. You can also remove existing cookies through your browser settings. You can buy and use an eSIM without consenting to marketing.

When a review invitation is offered, Google’s module may use cookies or similar browser technologies. Loading the module sends Google the order reference, confirmation email address, digital recipient country and estimated delivery date before the survey choice is made. The review module is separate from Google Analytics, advertising Consent Mode and the marketing cookie setting.

Choose No in Google’s dialog if you do not want a survey email. We store only an order reference and a presentation marker in session storage to prevent repeat invitations in the same browser session; that marker does not record your survey choice. Browser settings let you block or remove cookies and session storage. See Google’s cookie information and our privacy disclosure.