What we store, and what we don't.

§ 01 · Categories in use

• 01

  Strictly necessary

  On by default · cannot be disabled

  These are required for the site to function. They hold your session, your authenticated identity (when signed in), the CSRF token that protects you from cross-site attacks, and your selected locale.

  • • dhitrips_session — your sign-in session (HTTP-only, secure)
  • • XSRF-TOKEN — CSRF protection per Laravel Sanctum
  • • i18n_locale — your selected language

• 02

  Preferences

  On by default · can be disabled in your account settings

  Remember UI preferences across visits — search filters, currency, density. None of these are read by any third party.

  • • dhitrips_currency — your preferred display currency
  • • dhitrips_search_filters — recently used search filter state

• 03

  Analytics

  OFF by default · opt-in only

  Aggregate usage analytics. We do not run analytics that profile individual visitors or share data with advertisers. If we add a privacy-respecting analytics service, it will be opt-in and the page will list it here. As of today: none.

  • • No analytics cookies set as of this writing.

• 04

  Marketing / advertising

  NONE

  We do not run paid tourist acquisition. We do not set advertising or remarketing cookies. We do not embed third-party ad pixels (Facebook, Google Ads, TikTok). This is a deliberate position, not an oversight.

  • • No marketing cookies set, ever.