Cookie Policy
How we use cookies and similar technologies, and how you can manage your preferences.
Last updated: November 3, 20261. What cookies are
Cookies are small files stored on your device when you visit a website. In this policy we also use "cookies" to refer to similar technologies, such as the browser's local storage (localStorage and sessionStorage) and pixels.
The controller of viatsy.com's own cookies is Albert Sabaté Martínez, trading as Viatsy ("Viatsy"). Third-party cookies are managed by the providers indicated in the table.
2. What cookies we use
- Technical and preference cookies (necessary): they make the website work, remember your cookie choice and the language or currency you choose, keep you signed in and make payments and security possible. They are exempt from consent (art. 22.2 LSSI-CE) and are always active.
- Request and booking measurement cookies: they make it possible to attribute requests and bookings to the originating campaign. They are always active, even if you reject cookies.
- Analytics cookies: Mixpanel allows us to measure how the website is used and to record, in anonymised form (pseudonymised if you submit an enquiry after accepting analytics cookies), a sample of visits, which we keep for 30 days. Mixpanel collects information about how you browse the website (pages visited and clicks) without personal data such as your name, email, phone number or address. The identifiers stored on your device (see the list) are only set if you accept them; in that case your IP address is used only to estimate your country and city, and Mixpanel does not retain it. In that case, the recording may include what you type in forms, except sensitive data. If you do not accept them, Mixpanel keeps measuring website use and recording a sample of visits, but stores nothing on your device, uses a different identifier on every page load, your IP address is not used, and your name, email, phone and address are hidden. This measurement without storage on your device is based on our legitimate interest (art. 6.1.f GDPR). If you accept analytics cookies and submit an enquiry or booking, we link your browsing and recordings to that enquiry under a pseudonymous identifier generated by us; Mixpanel never receives your name, email or phone number. Without your analytics consent, the recording is not linked to any identified person. Passwords, health data, document numbers and payment card details are never recorded.
- Advertising cookies: they make it possible to show you ads and measure their effectiveness, including on other websites and social networks. They are only set if you accept them.
By default, we only use technical and request and booking measurement cookies, and Mixpanel analytics without storing anything on your device. Analytics identifiers and advertising cookies are not set until you give your consent.
3. List of cookies
Technical and preference cookies
| Name | Owner | Purpose | Duration |
|---|---|---|---|
viatsy_cookie_consent | First party | Store your cookie choice | 12 months |
viatsy-locale | First party | Remember the language you choose | 12 months |
viatsy-trip-config | First party | Remember the configuration of the trip you were viewing | 30 days |
viatsy-nearby-origin | First party | Remember your nearest departure airport so that prices with flights are shown from it | 30 days |
better-auth.session_token / __Secure-better-auth.session_token | First party | Keep you signed in to the customer area | 7 days |
tp_ai_chat | First party | Keep your conversation with the AI travel assistant while you browse | Session (the conversation expires after 24 hours of inactivity or 7 days at most) |
recent-searches:v1 (local storage) | First party | Remember your recent searches on the website | Until you delete them |
taplany.storefront.theme (local storage) | First party | Remember the appearance (light or dark) you choose | Until you delete it |
booking-first-payment:*, esim-checkout-context (session storage) | First party | Complete the booking or purchase process correctly | Session |
chunk-reload:*, stale-build-reload:* (session storage) | First party | Reload the website if a new version has been published | Session |
__stripe_mid, __stripe_sid | Third party (Stripe) | Process the payment securely and prevent fraud (only on payment pages) | 1 year / 30 minutes |
Request and booking measurement cookies (always active)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
tp_attr | First party | Attribute requests and bookings to the originating campaign | 90 days |
_fbp, _fbc | Third party (Meta) | Attribute requests and bookings to the originating campaign | 90 days |
Analytics cookies (only with your consent)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
_ga | Third party (Google) | Distinguish visitors to compile usage statistics | 2 years |
_ga_* | Third party (Google) | Maintain the session state for the statistics | 2 years |
FPID, FPLC | Third party (Google) | Equivalent to the above, served from our domain | As set by the provider |
mp_<token>_mixpanel (local storage) | Third party (Mixpanel) | Anonymous identifier to recognise your repeat visits and compile usage statistics | Until you delete it or withdraw your consent |
mixpanelBrowserDb, mixpanelFlagsDb (IndexedDB) | Third party (Mixpanel) | Technical storage of the analytics tool | Until you delete it |
mp_tab_id_mixpanel_<token>, mp_gen_new_tab_id_mixpanel_<token> (session storage) | Third party (Mixpanel) | Technical identifier of the browser tab | Session |
viatsy_ga_cid (session storage) | First party | Associate your request with the visit for the statistics, if _ga does not exist | Session |
Advertising cookies (only with your consent)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
_gcl_au, _gcl_aw, _gcl_gb, _gcl_gs | Third party (Google) | Measure Google ad conversions | 90 days |
_gcl_ls (local storage) | Third party (Google) | Measure Google ad conversions | As set by the provider |
test_cookie | Third party (Google) | Check whether the browser accepts cookies for Google advertising | 15 minutes |
FPAU, FPGCLAW and others with the FPGCL prefix | Third party (Google) | Equivalent to the above, served from our domain | 90 days |
_ttp, ttcsid, ttcsid_* | Third party (TikTok) | Measure and show ads on TikTok | Up to 13 months |
_tt_enable_cookie | Third party (TikTok) | Record whether TikTok cookies are enabled or rejected | 13 months |
lastExternalReferrer* (local storage) | Third party (Meta) | Remember the referring website to measure Meta ads | Until you delete it |
__oppref, __obref | Third party (OpenAI) | Measure the effectiveness of ads on ChatGPT | As set by the provider |
__oaiq_consent | Third party (OpenAI) | Record your consent to or rejection of the measurement of ads on ChatGPT | 30 days |
__cf_bm, _cfuvid (OpenAI domains) | Third party (OpenAI) | Security of the services of the ChatGPT ads provider | 30 minutes / session |
The names and durations of third-party cookies are set by their providers and may change. Some embedded content (for example, the video player, the payment gateway or the electronic signature of the contract) may set its own technical cookies on its domains.
Some of these third parties may process data outside the European Economic Area with the safeguards described in our Privacy Policy.
4. Measurement from our servers
When you submit a request or make a booking or purchase and accept the conditions, we share with advertising and analytics platforms the information needed to measure the effectiveness of our advertising, regardless of your cookie settings. We also share browsing events with them, such as trip views or searches: without contact details if you have not accepted cookies, and with contact details (pseudonymised) only if you have accepted them. This measurement is carried out from our servers and is explained in section 7 of the Privacy Policy.
5. How to accept, reject or change your choice
When you first visit the website, you will see a cookie notice with three options:
- Accept All: enables analytics and advertising cookies.
- Reject All: only technical and request and booking measurement cookies will be used. Mixpanel analytics will keep running without storing anything on your device.
- Customize: you choose which categories you accept.
Browsing the website without choosing any option does not mean you accept cookies. Rejecting them does not prevent you from using the website.
You can change your choice or withdraw your consent at any time from the "Cookie Preferences" link at the bottom of every page. We store your choice for 12 months; after that period, or if we change this policy significantly, we will ask you again.
You can also block or delete cookies from your browser settings:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/microsoft-edge/cookies
If you block technical cookies, some features of the website, such as booking or payment, may not work properly.
6. Legal framework
This policy is governed by art. 22.2 of Spanish Law 34/2002 on information society services and electronic commerce (LSSI-CE), Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
7. Changes to this policy
We may update this policy when the cookies we use or the regulations change. The current version is always published on this page.
8. Contact
For any question about cookies, write to us at hello@viatsy.com.