Cookie Policy

What we use

We keep cookies and browser storage to a minimum:

• Sign-in: an httpOnly refresh cookie so you stay signed in on this device. It is marked Secure on the live site and is not readable by other websites.
• A short-lived access token in memory (not a tracking cookie) so the agent portal can call the API.
• Agent search: the last destination or selected product may be stored in sessionStorage so a room or ticket page in the portal can reopen what you clicked.
• Security: we record enough technical data (such as IP) to apply rate limits and to investigate abuse. That is not an advertising cookie.

What we do not use

We do not run third-party advertising cookies, and we do not sell browsing history. If we add an analytics tool later, we will name it here and, where the law requires a choice, ask before it runs.

How to control cookies

You can block or delete cookies in your browser. If you block the sign-in cookie you will need to log in on every visit, and some booking steps will fail. Necessary cookies are required for the portal to work.

More on personal data: Privacy Policy.