Travyxo — Cookie Policy
Effective date: 1 September 2026 Last updated: 30 September 2026 Version: 1.3
Plain-English summary. Travyxo uses a small number of cookies that are strictly necessary to sign you in, keep you signed in, and keep the Service secure, plus one functional cookie for your theme preference. We also use Google Analytics on our public marketing pages only — not in the app, and never on a shared itinerary link. We do not use advertising or cross-site behavioural tracking cookies. This policy explains what types of cookies we use, why, and how to manage them.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies — such as browser local storage — work in comparable ways and are covered by this policy where relevant.
2. How we use cookies on Travyxo
Travyxo uses cookies (and a small amount of local storage) for three purposes:
- Strictly necessary — to sign you in, keep you signed in, route requests correctly, and keep the Service secure.
- Functional — to remember your dark / light theme preference.
- Analytics — to count visits to our public marketing pages and understand which pages bring people to Travyxo.
Travyxo does not use advertising or cross-site behavioural tracking cookies.
Where analytics does and does not run. Google Analytics loads on our public marketing pages only — the home page, /pricing, the blog, and these legal pages. It does not load on the signed-in application (/dashboard, /admin), on the Client Portal (/my-trips), on client intake forms (/join/...), or on shared itinerary links (/i/...). That last exclusion is deliberate: a shared itinerary URL identifies one Customer's client and shows the prices quoted to them, and no part of it is sent to Google.
3. Cookies we use
The tables below describe the cookies and similar technologies set on the Travyxo marketing site, the Travyxo app, and where applicable on third-party domains you may interact with as part of using the Service.
3.1 Strictly necessary
| Cookie / Technology | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| Authentication session cookies | Clerk | Sign you in, maintain your active session, synchronise your session across browser tabs, and handle token refresh. For the full list of cookies Clerk sets, see Clerk's privacy notice. | Session to ~1 year | 1st-party, HttpOnly |
| Client Portal session cookie | Travyxo | Links your browser to an authenticated Client Portal session for users of the /my-trips area. Set on login and cleared on logout. |
30 days | 1st-party, HttpOnly, Secure, SameSite=Lax |
tvx_sid |
Travyxo | Remembers this browser's sign-in session so we can tell you if you were signed out because your account signed in on another device. | 30 days | 1st-party, HttpOnly, Secure, SameSite=Lax |
| Application routing cookies | Vercel | Manage request routing and, where applicable, preview-environment access. Set by our hosting provider. | Session to 1 year | 1st-party |
| CDN security cookies | Cloudflare | Security checks and load balancing for asset delivery. Set by our CDN provider on the asset-delivery domain. | Up to 30 days | 3rd-party (on asset domain) |
| Checkout session cookies | Whop | Required for the checkout payment session. Only set when a Customer initiates a subscription checkout. | Session | 3rd-party (on Whop's checkout domain) |
These cookies do not require consent under the GDPR (Recital 30) or the UK PECR exemption for cookies "strictly necessary" for a service that the user has requested. Disabling them will prevent the Service from working.
3.2 Functional
| Cookie / Technology | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| Theme preference cookie | Travyxo | Remembers your chosen dark, light, or system colour scheme so it is applied on your next visit. | 1 year | 1st-party, SameSite=Lax, Secure |
| Interface preference (local storage) | Travyxo | Remembers which section of the package builder you were last using, so you return to the same view on your next visit. Stored in browser local storage — not a traditional cookie, but subject to the same principles. | Persistent (until cleared) | 1st-party local storage |
Functional cookies are not strictly necessary, but they improve the experience by remembering preferences. The theme cookie is written only when you actively choose a colour scheme (or when we restore a choice you made previously while signed in) — it is never set on a first visit or before you have asked for anything, so it is set as a direct result of your own action. The interface preference is written the same way, when you use the builder. The consent banner described in section 6 governs analytics cookies.
3.3 Analytics
| Cookie / Technology | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes one visitor from another so repeat visits are not double-counted. | 2 years | 1st-party |
_ga_<container-id> |
Google Analytics 4 | Maintains the analytics session state for the property. | 2 years | 1st-party |
These are set on Travyxo's public marketing pages only (see section 2 for the pages excluded, which include shared itinerary links). They are not strictly necessary. Where consent is required in your region, consent must be obtained before they are set — see section 6.
We use Google Analytics to answer questions like which pages people arrive on and which sources send them, not to build profiles of individuals. Google acts as our processor for this data. See Google's privacy policy and how Google uses data from sites that use its services.
3.4 Marketing / Advertising
Travyxo does not currently use marketing or advertising cookies, and we do not engage in cross-site behavioural tracking. If that changes, we will update this section and obtain consent in regions where consent is required.
4. Third-party cookies
Some cookies are set by third parties when you interact with their features through Travyxo. The relevant providers and links to their policies are:
- Clerk (authentication) — see Clerk's cookie and privacy notices at https://clerk.com/legal/privacy.
- Whop (payments, only when you enter the checkout flow) — see Whop's own cookie and privacy notices at https://whop.com.
- Cloudflare (asset delivery) — see https://www.cloudflare.com/cookie-policy/.
- Google Maps Platform (geocoding and mapping, where embedded) — see https://policies.google.com/privacy.
- Vercel (hosting; routing and preview-environment cookies) — see https://vercel.com/legal/privacy-policy.
If any of these providers changes the cookies they set, we will reflect the change in §3 within a reasonable time.
5. How to manage cookies
In Travyxo. If you are in a region where we ask for consent (see section 6), a Cookie settings link appears in the site footer. It reopens the consent banner so you can change your answer at any time. Choosing "Essential only" stops analytics immediately and no further analytics data is collected.
You can also control cookies through your browser settings:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Safari (macOS): https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
If Travyxo provides an in-app cookie banner or preferences centre, you can change your choices for non-essential cookies there.
Disabling strictly necessary cookies will prevent core features from working — most importantly, you will not be able to sign in.
6. Consent
Strictly necessary cookies are exempt from consent under the GDPR and the UK PECR.
In the EEA, the UK and Switzerland, no analytics cookie is set until you have accepted. On your first visit to our public website we show a banner with two equally weighted choices — accept analytics, or essential only. Google Analytics does not load, and no _ga cookie exists, unless and until you choose to accept. Ignoring the banner has the same effect as declining: nothing non-essential is set. Where we cannot determine which country you are in, we ask rather than assume. The banner appears only on the pages where analytics runs at all: the signed-in application, the client portal and shared itinerary links never load Google Analytics, so there is nothing there to consent to.
Your answer is remembered for 180 days, after which we ask again. You can change it at any time through the Cookie settings link in the site footer, or by clearing cookies in your browser.
The theme and interface preferences described in section 3.2 are not covered by this banner, because they are written only when you actively choose a setting rather than on arrival.
In other regions, your local law applies and analytics runs without a prior prompt. Many of those regions follow an "opt-out" model — if that is true for you, you can opt out through your browser settings or via the controls described in section 5.
7. Changes to this policy
We may update this policy, for example when we add or remove a cookie or when a third-party provider changes its cookies. Material changes will be notified in-app and (for Customers) by email to the contact on file. The "Last updated" date at the top reflects the most recent revision.
8. Contact
If you have any questions about cookies or this policy, email admin@travyxo.com.