Cookie Policy

1. What are cookies and similar technologies?

Cookies are small text files that are stored on your device when you visit a website.
Similar technologies include local storage, session storage, pixels, SDKs and device identifiers that are used in web and mobile applications.

We use these technologies to:

• Make the Service work properly
• Remember your preferences
• Understand how the Service is used
• (Only with your consent) measure marketing campaigns

2. How we categorise cookies

We distinguish between the following categories:

2.1 Strictly necessary cookies

These cookies are essential for the Service to function. They enable basic features such as:

• Session management and authentication
• Security and fraud prevention
• Load balancing
• Language and basic preference storage
• Cookie consent status
• Payment processing (Paddle Checkout, including fraud-prevention cookies set by Paddle when you pay on tripstant.app). App Store / StoreKit purchases in the iOS app do not use Paddle Checkout cookies; RevenueCat matches the App Store receipt on the server.
• Crash reporting (Sentry) — error events only, no session replay and no advertising identifiers

These cookies cannot be switched off in our systems. Without them the Service may not work correctly.

Legal basis: Legitimate interest / strictly necessary for the service (Art. 6(1)(f) GDPR and ePrivacy rules).

2.2 Analytics cookies

These cookies help us understand how visitors and users interact with the Service (e.g. which pages are visited, how long users stay, where they drop off).

The data is generally aggregated and used to improve the Service.

Legal basis: Consent (Art. 6(1)(a) GDPR).
These cookies are only set if you give your consent.

Tools currently planned or in use:
PostHog (PostHog Inc.; EU Cloud at eu.i.posthog.com). Product events (for example itinerary generated, checkout started), autocaptured clicks, pageviews, pageleave, a signed-in user identifier (no email), and masked session recordings (form fields including passwords are masked). Loaded only after you opt in to analytics. Rejecting or withdrawing consent opts you out and stops recording.

2.3 Marketing / advertising cookies

These cookies (or similar identifiers) may be used to measure the effectiveness of our marketing campaigns on platforms such as Instagram, TikTok, YouTube, X or LinkedIn, and to show relevant content.

Legal basis: Consent (Art. 6(1)(a) GDPR).
These are only activated if you give your explicit consent.

Tools currently planned or in use:
No third-party marketing or advertising cookies are currently active. If we introduce campaign measurement tools, they will only run with your consent and will be listed here.

3. Cookies and similar technologies in the mobile apps

In our iOS and Android apps we may use:

• Device identifiers
• SDKs for analytics, crash reporting and performance monitoring
• Local storage for offline functionality and preferences

Where these technologies are not strictly necessary, we will request your consent in line with applicable platform rules (App Tracking Transparency on iOS, etc.) and data protection law.

A list of the main SDKs will be maintained and can be provided on request or published in an updated version of this policy.

4. Managing your choices

You can change or withdraw your consent at any time:

• Via the cookie preferences link in the footer of the website
• Via the cookie banner that appears on your first visit (and can be re-opened)
• In the settings of your browser (you can delete or block cookies)
• In the privacy / tracking settings of your mobile device and within the app (where available)

Please note that blocking strictly necessary cookies may prevent parts of the Service from working properly.

5. Retention

• Strictly necessary cookies: usually session-based or short-term (up to 12 months for preference cookies)
• Analytics and marketing cookies: according to the retention periods of the respective tools (typically between 1 and 24 months) or until you withdraw consent. PostHog retains events according to the project’s PostHog plan.

6. Further information

For more details about how we process personal data in general, please see our Privacy Policy. Billing and refunds are described in our Refund Policy.

If you have questions about our use of cookies or similar technologies, contact us at:

hello@tripstant.app