Cookie Policy

• Administrator authentication: Supabase session cookies are set only for administrator login. They are HttpOnly, Secure in production, SameSite=Lax, with a maximum eight-hour verified session. They are not set for ordinary store visitors.
• Cookie choices: planora_cookie_consent_v2 in localStorage remembers the device's choice for up to six months. The decision is not a marketing identifier and is not synchronised between devices.
• Helpful votes and email language: local preferences support the feature you use and do not contain a customer database record.
• Payments: Dodo Payments applies its own necessary payment and fraud controls on the hosted checkout. Planora does not read those cookies.
• Weather: Open-Meteo is contacted by our server, not through tracking scripts in your browser.
• Error monitoring: Sentry reports filtered operational errors. Session replay is disabled; this is not a recording of your screen or form contents.
• Form security: Vercel BotID Basic verifies requests to forms and administrator login to reduce automated abuse. This security check is separate from optional analytics.

Vercel Web Analytics and Speed Insights, plus our first-party performance measurements, load only after you accept analytics. They measure visits to public pages and speed, not advertising profiles. Query strings, fragments, account pages and payment/data-management tokens are excluded. Google Analytics, advertising cookies and marketing pixels are not installed.

The original Trustpilot Review Collector loads only when you select “Show Trustpilot widget”. This connects your browser to Trustpilot, which receives technical connection data and may read its own storage. Hide the widget to remove its embedded content. Reloading the page resets this separate, page-only choice; no review widget loads automatically.

The banner offers accept all, reject non-essential and preferences. Optional statistics are off by default; necessary features cannot be disabled through that choice. You can withdraw optional consent in the preferences panel at any time. Already-loaded measurement code checks your current choice before each event, so withdrawal blocks subsequent events.

We request another decision after six months or a material version change. Browser settings also let you clear site data. Blocking all necessary cookies may prevent administrator login or payment on the provider's site.

See our Privacy Policy for providers, retention and your rights. Questions: planoratrips@gmail.com.