Legal
Cookie & Storage Policy
Last updated July 16, 2026
1. What cookies and browser storage are
Cookies are small entries a website saves in your browser; sites can also use similar browser storage (like localStorage). Some are essential for a service to work at all — keeping you signed in, or letting a payment go through safely. Others are optional conveniences. This page lists everything Farevia actually uses, plainly.
2. Strictly necessary — always on
Sign-in session cookies (NextAuth, HttpOnly, removed when the session ends or you sign out) keep your account signed in and protect against cross-site request forgery. The private-beta access cookie (fv_beta) remembers that you entered the beta code. Short-lived receipt-authorization cookies (rcpt_…, 30 minutes, scoped to one receipt) protect guest receipts after you prove your booking reference and last name. Your privacy choices themselves are stored on your device (farevia.consent.v1). The service cannot operate without these, so they cannot be switched off.
3. Payment and fraud prevention
Checkout runs inside our payment processor's own hosted payment form, which loads only on the payment step of a booking. During payment the processor sets its own first-party cookies and storage strictly for payment processing and fraud prevention. Card details never touch Farevia's servers. The processor's use of this storage is described in its own privacy documentation.
4. Preferences — your choice
Two items. Your last flight search (farevia.lastSearch.v1, localStorage) so “Search flights” can offer to resume it — it stays only in your browser, is never sent to Farevia, expires after at most 60 days, and is deleted the moment you press “Start a new search”. And whether you have already dismissed the Public Beta welcome (farevia.publicBetaWelcome.v1, localStorage), so it is not shown again. Both are deleted when you turn Preferences off in Privacy settings.
5. Analytics and marketing — none
Farevia currently uses no analytics tools, no advertising pixels, no campaign-attribution storage, no error-tracking SDKs in your browser, and no third-party scripts other than our payment processor's hosted payment form on the payment step. If that ever changes, those tools stay technically blocked until you allow the matching category in Privacy settings — and this page will be updated first.
6. Changing your choices
Privacy settings (linked in the footer of every page) lets you switch Preferences off or on at any time, and shows the Analytics and Marketing controls that guard any future tools. Withdrawing a category also deletes its stored data immediately. You can additionally clear all site data in your browser's settings at any time; strictly necessary items will simply be recreated when you next sign in, enter the beta, or pay.
7. Browser privacy signals
If your browser sends a Global Privacy Control signal, Farevia treats Analytics and Marketing as declined regardless of stored settings.
8. Contact and updates
Questions: privacy@farevia.co. This policy reflects the storage inventory as of July 16, 2026 and is updated whenever the inventory changes. It is pending review by qualified counsel before public launch.