Legal
Cookie Policy
Every cookie and browser-storage item Travia uses, what each one is for, and how long it lasts. This is the complete list, not a summary — it is generated from an audit of the platform itself.
Last verified against the platform on 2026-10-07.This document was written by Travia's engineering team to describe accurately how the system works. It has not yet been reviewed by legal counsel, and it is not legal advice.
Analytics and advertising storage are denied by default. Nothing in those categories is written to your device until you make a choice, and declining costs you nothing but the analytics — every feature on Travia works either way.
Strictly necessary items are different: they are what makes signing in, staying signed in, and being protected from cross-site attacks possible at all. They cannot be switched off without breaking the service, and none of them track you across other websites.
to change your choice at any time.
These keep you signed in, keep your session safe, and remember the cookie choice you already made. There is no consent toggle for them because without them there is no working service to consent to.
| Name | Type | What it does | Duration |
|---|---|---|---|
| auth | Cookie | Keeps you signed in. HttpOnly, so it cannot be read by scripts. | Matches your session token (7 days by default, never less than 24 hours); renewed by travia_refresh. |
| travia_refresh | Cookie | Renews your sign-in silently so you are not logged out while you are using Travia. HttpOnly; an opaque random value, stored only as a hash on our side. | 30 days from your last visit, and never more than 90 days from when you signed in. |
| travia_did | Cookie | A random identifier for this browser, set when you sign in, so Security → Devices can sign out one browser without signing out your others. Used for nothing else. | 400 days |
| travia_g_state | Cookie | A one-time value that ties a “Continue with Google” sign-in to the browser that started it, so another site cannot complete a sign-in on your behalf. | 10 minutes |
| travia_csrf | Cookie | A random token used to prove a request came from Travia and not from another website. It identifies nothing and is not a credential on its own. | 30 days |
| session | Cookie | Short-lived server session used during sign-in flows such as Google and SSO. | 24 hours |
| travia_consent | Cookie | Records your cookie choice so it can be applied before any tag loads on your next visit. Without it we would have to ask you every time. | 180 days |
| atlas_guest_n | Cookie | Counts free Atlas messages for signed-out visitors so the limit can be enforced. | Session |
| travia-auth-v2 | Local storage | Your active profile (personal or business) so the right one is loaded on return. | Until you sign out or clear browser storage. |
These are stored in your browser, not on our servers, and exist so the site comes back the way you left it. Clearing your browser storage removes them and nothing breaks — you just get the defaults again.
| Name | Type | What it does | Duration |
|---|---|---|---|
| travia-preferences | Local storage | Your chosen display currency and language. | Until you clear your browser storage. |
| travia-primary-color / travia-primary-vars / theme | Local storage | Your appearance settings, so the page renders in your theme before it loads. | Until you clear your browser storage. |
| travia-i18n-v1:<language> | Local storage | Translations already fetched for your chosen language, so pages do not have to be re-translated on every visit. | Until you clear your browser storage. |
| travia:rv / travia:sh | Local storage | Recently viewed listings and recent searches, kept on your device when you are signed out. | Until you clear them from Profile → Your activity, or clear browser storage. |
| travia_loc_prompt_v1 / travia_consent_dismissed | Local storage | Remembers that you dismissed a prompt, so we do not ask again immediately. | Until you clear your browser storage. |
Analytics tells us which pages people use and where they get stuck, in aggregate. It is off until you accept it, and turning it off later stops it immediately.
| Name | Type | What it does | Duration |
|---|---|---|---|
| _ga, _ga_* | Cookie | Google Analytics — how the site is used in aggregate. Only set if you accept analytics cookies. | Up to 2 years |
Advertising cookies measure whether a campaign worked. They are off until you accept them.
| Name | Type | What it does | Duration |
|---|---|---|---|
| Advertising cookies | Cookie | Set by Google to measure campaign performance. Only set if you accept advertising cookies. | Varies by provider |
Travia loads no affiliate or partner tracking tags. Links out to an airline or a partner site are plain links; nothing on Travia rewrites them or follows you there.
in the footer, or on any page, reopens the consent panel. Your current choice is also shown in Preferences → Ads & personalization.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will sign you out and prevent sign-in.
Questions about any of this go to support@travia.ai.