Necessary
Required for secure sessions, QR booking, cart and checkout state, language selection and remembering your privacy choices.
Cookie Policy
Last updated: 23 September 2026
This policy explains how TravelToc uses cookies and similar technologies, including browser storage, in its public website, QR booking flow and PWA experience.
1. How we classify technologies
Necessary technologies operate without optional consent only when required to provide the service securely or to remember a choice you requested. Preferences, Analytics, Marketing and External Media are optional and are disabled until you choose to enable them.
2. Necessary technologies
These support the secure session, QR booking context, cart and checkout flow, selected language and the storage of your privacy choices. Rejecting optional technologies does not prevent you from completing a booking.
Technology register
| Technology | Provider | Category | Purpose | Duration | Consent |
|---|---|---|---|---|---|
session | TravelToc | Necessary | Secure application and booking session | Session | No |
traveltoc_consent | TravelToc | Necessary | Stores your privacy choices and consent version | 6 months | No |
qr_lang | TravelToc | Necessary | Remembers the language you selected | 1 year | No |
traveltoc_visitor | TravelToc | Analytics / Marketing | Pseudonymous analytics and marketing identity when enabled | Up to 13 months | Yes |
traveltoc_install_* localStorage | TravelToc | Preferences | Optional PWA install preference and snooze state | Until cleared or the feature resets it | Yes |
traveltoc_push_* localStorage | TravelToc | Marketing | Optional notification prompt preference | Until cleared or the feature resets it | Yes |
3. Preferences
Preference storage is used only when enabled to remember optional interface choices, such as whether an install prompt was dismissed or an installed experience was confirmed.
4. Analytics
When enabled, TravelToc creates a random first-party visitor identifier and records limited business events such as catalogue views, excursion views, cart actions, checkout starts and booking conversions. The analytics event stream is designed not to store names, email addresses, phone numbers, room numbers, raw QR tokens, IP addresses or full URLs.
5. Marketing
When enabled, TravelToc may use the pseudonymous visitor identity for campaign attribution, audience segmentation and promotional messaging. Promotional Web Push also requires a separate browser notification permission. Newsletter consent is independent from cookie consent.
6. External media
Optional third-party embeds, such as social media, video or maps, are placed in this category and should not load until External Media has been enabled. Standard presentation resources may still be requested where required to render the service.
7. Changing your choices
Use Cookie settings at any time to change or withdraw optional consent. When Analytics or Marketing is withdrawn, TravelToc stops the corresponding tracking and removes the optional visitor cookie from the browser when it is no longer required by an enabled category.
8. Web Push and newsletter
Web Push is an additional opt-in. Marketing consent alone does not grant notification permission. Newsletter subscriptions are also separate and can be unsubscribed independently at any time.
9. Contact
For privacy questions or requests, contact info@traveltoc.gr.