Cookie Policy

• session_id (HttpOnly cookie) — essential, created as a random UUID to keep your trip planning, chat, and booking context tied to this browser. This secure cookie cannot be accessed by JavaScript, providing enhanced protection against XSS attacks. Cleared when you choose "Start new session" or clear browser cookies.
• Expedia Rapid API identifiers — when you request live booking details, Expedia may return itinerary IDs, rate keys, or session tokens. They are required to fetch prices/availability and are governed by Expedia policies. We do not set marketing or analytics cookies from Expedia.
• No analytics or marketing cookies are set at this time. Categories for functional, analytics, and marketing remain off by default in the consent banner.

• Essential cookies (session_id) run without consent because the site cannot function without them.
• Functional, analytics, and marketing categories are off by default. If we ever add them, we will block them until you opt in.
• Use the banner or the “Manage cookies” link in the footer to review or change your choices at any time.

• Functional: remembering UI preferences if introduced later. None are set today.
• Analytics: privacy-preserving usage measurement. None are loaded unless you opt in.
• Marketing: campaign measurement or remarketing. None are active.

If we enable any of these, we will update this policy, request consent, and keep them disabled unless you opt in.

• Open the “Manage cookies” link in the footer at any time to review or change your choices.
• Clear cookies via your browser settings if you want to remove the essential session_id immediately. Using "Start new session" in the app also clears the cookie and securely deletes the corresponding server-side session data.

The session_id persists until you clear it. Expedia itinerary identifiers are retained only as long as needed to show booking status or provide support. For more on how we handle data, see our Privacy Policy.