Cookie Policy

What cookies and browser storage are

A cookie is a small piece of text a website saves in your browser; the browser sends it back to that website on every visit. Browser storage (localStorage) also keeps data on your device, but only the website’s own pages read it — it is not sent along by itself. Travl uses both only for what is listed below.

Cookies

sl_lang (Travl)

Purpose: Remembers the language you use on Travl, so links without a language open in it.

How long: 1 year after your last visit.

Stripe’s cookies (checkout page only)

Purpose: Stripe’s payment script (Stripe.js) shows the card field on the checkout page and can set Stripe’s own cookies there, for fraud prevention and payment security.

How long: Set and controlled by Stripe — see Stripe’s own privacy and cookie policy.

Browser storage (localStorage)

Travl keeps the following in your browser’s storage (in brackets: the name your browser shows).

Your login (sb-…-auth-token)

Purpose: Keeps you signed in. It is created by Supabase, the service Travl uses for logins.

How long: Until you sign out.

The trip you are planning (sl_last_plan and related entries)

Purpose: Your search, the trip plan and what you picked, so the results and checkout pages show the same trip.

How long: 7 days after your last search or cart.

Carts (sl_cart:…)

Purpose: The flight and hotel you chose, with prices, for checkout.

How long: 24 hours.

Imported travellers (sl_imported_travelers)

Purpose: Travellers from a file you uploaded — names, dates of birth and any passport details in it — so you can book for them.

How long: 24 hours.

Search history (sl_search_history)

Purpose: Your last 20 searches, shown in your account and in the chat so you can search again.

How long: Until you clear it in your account (Searches → “Clear history”) or sign out.

Your last booking (sl_last_booking)

Purpose: The booking reference, destination and itinerary of your last paid booking, for the confirmation page.

How long: 7 days.

Links you shared (sl_trip_shares)

Purpose: For each trip you shared with “Share trip”: the link’s id and the code that lets this browser stop it.

How long: Until the link expires (30 days) or you stop it; removed when you sign out.

The chat’s conversation id (sl_agent_sid)

Purpose: Lets the chat carry on the same conversation. The conversation itself is kept only in our server’s memory and forgotten after 6 hours without use.

How long: Until you sign out.

Departure airport (sl_origin)

Purpose: The airport you fly from: the one you chose, or else one suggested from the rough location of your IP address, which our host Vercel works out when the page loads — the location itself is not stored. Your device’s own location is used only when you press “Use my location”: rounded to about a kilometre, used once to find the nearest airports, and not stored either.

How long: Until you clear your browser’s data for Travl.

Currency and exchange rates (sl_currency…)

Purpose: The currency prices are shown in — the one you picked, or one that fits your account’s country or your location — and a copy of the European Central Bank’s exchange rates to convert them.

How long: Until you pick another currency or clear your browser’s data for Travl; the rates are refreshed regularly.

When you sign out, Travl removes your login, the trip, carts, imported travellers, the search history, your last booking, the chat’s conversation id and the codes of links you shared from this browser. Your language, currency and departure airport stay.

Content from other services

Some of what you see on Travl is loaded by your browser directly from other services. Like any website your browser loads something from, they see your IP address. We don’t send them your name or contact details.

• Unsplash — destination photos, on the front page and elsewhere.
• logo.dev — hotel brand logos on the front page.
• Kiwi.com — airline logos, on the results and checkout pages.
• OpenStreetMap — the map on the results page.
• unpkg.com — the map markers and the globe picture on the results page.
• Open-Meteo — the weather forecast on the results page. Your browser asks for it with the destination’s name and coordinates.
• Stripe — the card field on the checkout page (Stripe.js), which can set Stripe’s own cookies (see Cookies above).

The fonts are served by Travl itself — no font service is contacted.

No analytics, advertising or tracking

Travl uses no analytics, advertising, tracking or social-media cookies or scripts. We only use the cookies and storage that are needed to deliver the service you ask for, or that keep settings you chose yourself — so we don’t ask you to accept cookies.

How to remove it

• Sign out: removes your login and the personal data listed above from this browser.
• “Delete trip” on the results and checkout pages: removes the trip, carts and imported travellers at any time.
• Your browser’s settings: delete or block cookies and site data for Travl. If you block them, signing in and booking may not work.
• On a shared or public computer, sign out when you’re done, or use a private window — the browser deletes its data when you close it.