Cookie Policy

1. What Are Cookies

Cookies and local storage are small text files or data entries stored on your device when you visit websites. They help websites remember preferences, authorize sessions, and compile aggregate usage metrics to improve interface design.

2. Essential Cookies

These cookies are strictly required to operate key functions of our platform. They include session handlers that track routing queries and prevent authentication timeouts. Without these cookies, the basic security and service integrity of the app cannot be maintained.

3. Analytics Cookies (PostHog)

We utilize third-party analytics tools (primarily PostHog) to track anonymized user engagement (like search clicks and page navigations). These cookies help us analyze conversion funnels and optimize user flows. Personally Identifiable Information (PII) collection is disabled in these scripts.

4. Authentication Cookies

When you log into Trayago, we set secure, HTTP-only `refreshToken` cookies to validate your session across page transitions. These cookies are encrypted, secured under `SameSite` policies, and prevent unauthorized account access.

5. Local Storage Usage

We leverage browser `localStorage` to persist lightweight user interface preferences, including:

• theme: Remembers your Light or Dark mode UI preference.
• pwa_prompt_dismissed: Controls PWA install prompts to prevent repeating banners.
• betaCode: Validates user access privileges during the beta testing phase.

6. PWA Storage & Service Worker Cache

Our service worker (`sw.js`) caches static assets, styling bundles, and the fallback document (`/offline`) in the browser Cache Storage. This allows the app to load quickly and display the offline shell when network connectivity is lost.

7. Push Notification Permissions

If you opt-in to receive delay alerts or PNR status changes, push notification tokens and permissions are registered. These are stored locally and in the database scope (`/notification-scope/`), and can be revoked at any time through your browser's site settings.

8. Third-Party Services

When redirected to third-party services (like the official IRCTC portal for ticketing, or flight/hotel partner widgets), these external domains may set their own tracking cookies. Trayago does not control or hold liability for third-party cookie policies.

9. Cookie Management Instructions

You can block or delete cookies through your browser settings (e.g., in Chrome, go to Settings > Privacy and Security > Cookies and other site data). Note that blocking essential cookies or authentication tokens will prevent logging into profiles and restrict PRO functionality.

10. Contact Information

For any questions regarding how we use cookies or protect your tracking data, please reach out to us at **support@trayago.in**.