Policies

Cookie Policy

What we store on your device, which partners load, and how to change your mind.

Necessary cookies always run. Everything else waits for your choice, and you can change it anytime. Global Privacy Control is treated as an opt-out of sale/share. More detail is in the Privacy Policy.

Necessary

Needed for the site to work or to remember a choice you made. Always on, so they can't be switched off.

authjs.session-token / __Secure-authjs.session-token
Keeps you signed in to your reader account.
Provider
Alex Journeys (Auth.js)
Type
Cookie
Kept
Up to 30 days
__Host-authjs.csrf-token, __Secure-authjs.callback-url, __Secure-authjs.state, __Secure-authjs.pkce.code_verifier
Protects sign-in (CSRF and Google sign-in checks) and returns you to the right page.
Provider
Alex Journeys (Auth.js)
Type
Cookie
Kept
Session to 15 minutes
fj_cms
Site editor session (admins only).
Provider
Alex Journeys
Type
Cookie
Kept
7 days
aj_member_handoff
Carries a booking you started across sign-in.
Provider
Alex Journeys
Type
Cookie
Kept
15 minutes
aj_consent / aj.consent
Stores your cookie choice, its version and when you made it.
Provider
Alex Journeys
Type
Cookie
Kept
6 months
aj:preferences
Language and currency you picked in the footer.
Provider
Alex Journeys
Type
Cookie
Kept
1 year
theme
Light or dark mode you picked.
Provider
Alex Journeys
Type
Local storage
Kept
Until cleared
aj-cart-v1
Items in your store cart.
Provider
Alex Journeys
Type
Local storage
Kept
Until cleared
fj.plan-a-trip.*
Trip planner drafts and checklist saved on your device.
Provider
Alex Journeys
Type
Local storage
Kept
Until cleared
aj_newsletter_prompt / aj.newsletter-prompt.dismissed
Remembers that you closed the newsletter pop-up.
Provider
Alex Journeys
Type
Cookie
Kept
Up to 1 year
aj.home-screen-dismiss-until, aj.home-screen-installed
Remembers the “Add to Home Screen” prompt choice.
Provider
Alex Journeys
Type
Local storage
Kept
Until cleared
_vcrcs
Security checkpoint that blocks bots and abuse.
Provider
Vercel (hosting)
Type
Cookie
Kept
Up to 1 hour
js.stripe.com (__stripe_mid, __stripe_sid)
Card payments and fraud prevention, only on Premium and flight checkout.
Provider
Stripe
Type
Third-party script
Kept
30 minutes to 1 year
payment-wrapper.liteapi.travel
Secure payment form on hotel checkout.
Provider
Nuitée / LiteAPI
Type
Third-party script
Kept
Set by provider
challenges.cloudflare.com
Bot check on account sign-up.
Provider
Cloudflare Turnstile
Type
Third-party script
Kept
Set by provider
tile.openstreetmap.org
Map tiles on destination, stays and trip maps. No cookies; your IP address is visible to the tile server.
Provider
OpenStreetMap
Type
Third-party script
Kept
None

Preferences

Optional partner helpers. They load only if you turn Preferences on.

components.liteapi.travel (chatbot)
Booking assistant on the trip planner.
Provider
Nuitée / LiteAPI
Type
Third-party script
Kept
Set by provider
Consent
Loads only with Preferences consent.

Analytics

Counts visits and clicks so we can see which guides help. Loads only with Analytics consent.

_ga, _ga_<ID> (googletagmanager.com)
Visit counts, plus booking-funnel and link-in-bio click events. Off on the site right now; if it's switched on, it loads only after consent.
Provider
Google Analytics 4
Type
Third-party script
Kept
Up to 2 years
Consent
Loads only with Analytics consent.

Marketing & embeds

Embeds and affiliate widgets from partners who set their own cookies and may use them for advertising. Blocked until you allow Marketing, or until you click to load one item.

instagram.com embed (csrftoken, mid, ig_did, datr)
“Watch the Reel” videos on stories.
Provider
Instagram / Meta
Type
Embed
Kept
Up to 2 years
Consent
Click to load, or Marketing consent.
google.com/maps embed (NID and similar)
Neighborhood map on hotel pages.
Provider
Google
Type
Embed
Kept
Up to 6 months
Consent
Click to load, or Marketing consent.
viator.com/orion/partner/widget.js
Tours and experiences widgets with affiliate attribution (members only).
Provider
Viator (Tripadvisor)
Type
Third-party script
Kept
Set by provider
Consent
Click to load, or Marketing consent.
cdnjs.buymeacoffee.com widget
Floating support button on stories.
Provider
Buy Me a Coffee
Type
Third-party script
Kept
Set by provider
Consent
Loads only with Marketing consent. The plain footer link always works.
/out affiliate links
Partner links pass through a short “leaving the journal” page. We set no tracking cookie; the partner may set its own cookies after you arrive on its site.
Provider
Booking partners (Viator, hotels, gear shops)
Type
Link
Kept
Set by partner
Consent
No script on this site. Covered by each partner's policy.