1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They let the site remember things (a login session, a preference) across pages and visits. The same applies to similar technologies such as localStorage, which we and some of our embedded providers use.
2. Categories we use
We keep our footprint deliberately small. The table below is the full list as of the effective date above.
| Name / source | Type | Purpose | Lifetime |
|---|---|---|---|
| sb-*-auth-token | Strictly necessary | Authenticates the admin session (Supabase Auth). Only set when an admin signs in to /admin/login — not set for regular visitors. | Session / 1 hour |
| Dodo Payments cookies | Strictly necessary (payment) | Set by Dodo Payments while you are on their hosted checkout to prevent fraud and complete the transaction. We do not read or share these cookies. | Variable (controlled by Dodo) |
| open-meteo.com | Strictly necessary (functional) | Free editorial weather on our Indonesia weather article (blog content, not a paid guide). Forecasts are fetched by our server from Open-Meteo (CC BY 4.0; no API key). Your browser calls our /api/weather/forecast only — no third-party weather scripts on your device. | None set on your device for weather |
| Trustpilot widget | Strictly necessary (reviews) | Loaded on product pages for the Review Collector (invite to leave a service review). May set cookies on the trustpilot.com domain when you interact with the widget. Only loaded when Trustpilot env vars are configured and the domain is verified — see Trustpilot's cookie policy. | Variable (controlled by Trustpilot) |
| Sentry replay/session | Strictly necessary (security) | May set short-lived cookies / sessionStorage values to correlate JavaScript errors with a single browsing session. Used only for crash diagnostics. | Session |
| planora_cookie_consent_v1 | Strictly necessary (consent record) | Stores your cookie choices in localStorage on this device only (essential always on; optional analytics yes/no). Not sent to our database. Lets us remember your answer and avoid showing the banner on every visit. | Until you clear site data |
| Google Analytics (planned) | Non-essential (statistics) | Not active yet. When we enable it, it will help us understand aggregated traffic (pages viewed, rough geography). No advertising profiles. Loaded only if you accept analytics in the cookie banner or in your cookie preferences on this page. | Variable (controlled by Google) — if accepted |
We do not use advertising cookies, cross-site tracking for ads, fingerprinting, or social-media marketing pixels. Optional analytics (Google Analytics) will be off until you opt in on this page — non-essential analytics are pre-selected as on in the preferences panel; you can reject them with one click.
3. Consent banner
When you first visit Planora (public site, not the admin area), a cookie banner appears at the bottom of the screen. You can:
- Accept all — essential cookies stay on; optional analytics are allowed (Google Analytics is not loaded yet, but your choice is saved for when we enable it).
- Reject non-essential — only strictly necessary cookies and storage remain; analytics stay off.
- Manage preferences — opens this page (Your cookie preferences) where essential cookies cannot be turned off; optional analytics are on by default but you can uncheck them before saving.
Your choice is stored only in your browser under planora_cookie_consent_v1 in localStorage. We do not sync it to Supabase or any other server. You can change your mind anytime in your cookie preferences at the top of this page.
Under EU and UK rules, strictly necessary cookies do not require prior consent. Non-essential cookies (such as analytics) require your consent before we set them.
4. How to manage cookies
- Most browsers let you block or delete cookies through their settings — typically under Privacy or Site permissions. Blocking strictly necessary cookies will break features (e.g. you won't be able to log into the admin or complete a payment).
- Dodo Payments cookies are managed by Dodo. See their privacy policy.
- On iOS, “Settings → Safari → Block All Cookies” works. On Android Chrome, “Settings → Site settings → Cookies”.
- Use your cookie preferences at the top of this page to change analytics preferences without clearing all site data.
5. Third-party services
When you start a checkout, we redirect you to Dodo Payments' hosted checkout page. Dodo sets its own cookies during that session per its privacy statement. We have no control over those cookies; we only receive the result (success / failure / capture id) via webhook.
6. Changes to this policy
We will revise this policy if our cookie usage changes — for example, if we add analytics or new third-party tools. The effective date at the top of the page is updated whenever we make a material change.
7. Contact
Questions about cookies on Planora? Email planoratrips@gmail.com , use our data management portal to unsubscribe or delete marketing data, or visit /contact.
Questions about this document? Reach us at /contact.