Itinerova Cookie Notice

This notice explains how ITINEROVA LLC uses cookies and similar technologies (like local storage) on the Itinerova website and app. See our Privacy Policy for more.

What we use

Strictly necessary (always on). These are needed for sign-in, security and core features, and they don't need your consent:

token — Keeps you signed in (secure, httpOnly) — Up to 7 days

OAuth state cookies — Protect Google/Apple sign-in — Minutes

Cloudflare Turnstile — Bot protection on sign-in and registration (may set cookies on Cloudflare's domain) — Set by Cloudflare

Stripe Checkout / Portal — Fraud prevention and payment, set by Stripe on its own pages — Set by Stripe

ti.analyticsConsent (local storage) — Remembers whether you chose Accept or Reject for analytics, so we don't load analytics before you choose and don't ask again — Until you change your choice or clear your browser data

ti.cookieConsent (local storage) — Remembers your choice about functional cookies — Until cleared

Functional (optional, off until you allow them):

Flight ticket search isn't available yet, so we don't keep a flight-search history. If we add it later, an optional cookie (ti_flight_search_history) may remember recent searches on this device for 30 days, and only after you allow functional cookies.

Preferences (local storage): theme, language, sidebar and map settings (ti.theme, ti.locale, etc.). They stay on your device and don't track you across sites.

Analytics (optional, off until you choose Accept). We use these only if you click Accept on the cookie banner. Before you choose, and if you choose Reject, they don't load and set nothing.

_ga — Google Analytics, on our public website pages only — Tells visits from the same browser apart with a random ID — 2 years

_ga_<container-id> — Google Analytics, on our public website pages only — Keeps track of your current visit (session) — 2 years

ph_<project_key>_posthog (cookie and local storage) — PostHog, inside the app only — Holds a random ID or your internal account ID and the current session ID, so the events and replay of one visit stay together. A PostHog session ends after 30 minutes without activity — Cookie: 1 year; local storage: until cleared

These are the providers' default durations. Your browser may shorten them (for example, Safari limits some cookies to 7 days). PostHog may also keep short-lived data in your browser's session storage for the open tab; it's cleared when you close the tab.

Session replay (PostHog, in the app, only after Accept). A session replay rebuilds how app pages looked and how you moved through them (clicks, scrolling, page changes) so we can find bugs and confusing screens. It isn't a video of your screen or camera.

Everything you type into fields is masked, so replays don't contain your keystrokes or what you enter, such as passwords, notes, messages or payment details.

We also hide the text and images of your trip content, such as notes, imported emails, photos and documents.

Replays are linked to an internal account ID, never your name or email.

How long analytics data is kept:

Google Analytics: event-level data for 2 months (a setting in our Google Analytics account). Aggregated reports that don't identify you may be kept longer.

PostHog: analytics events for 1 year. Session replays are kept for 30 days.

If you delete your account, we delete your PostHog data (events and replays) within 30 days.

Advertising: we don't use advertising or cross-site tracking cookies. Google Signals and ads personalization are turned off in our Google Analytics, and we don't use analytics data for advertising.

Your choices

On your first visit, the cookie banner offers Accept and Reject:

Accept turns on Google Analytics (public pages) and PostHog (in the app, including session replay). They load only after you click Accept.

Reject keeps only the necessary cookies and local storage. Itinerova works the same either way.

Your choice is saved in this browser (ti.analyticsConsent). On another browser or device, or after you clear your browser data, we'll ask again.

Change your mind anytime. Use Cookie settings in the footer of any page, or Settings → Account → Legal & privacy → Manage cookie preferences. Withdrawing consent is as easy as giving it. If you switch to Reject, we stop analytics right away and delete the analytics cookies and local storage in that browser. Data already collected is kept only for the periods above, unless you ask us to delete it sooner at privacy@itinerova.com.

Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we treat it as Reject: we don't load analytics or show the banner. You can still choose Accept in Cookie settings if you want to.

You can also block or delete cookies in your browser. If you block the necessary cookies, sign-in will stop working.

Changes and contact

We'll update this notice if we add new cookies, and ask for consent where required. Questions: privacy@itinerova.com.