Cookie Policy
Last Updated: April 2026
This Cookie Policy explains what cookies and similar technologies TripWave uses on tripswaves.com, what each one does, how long it lasts, and how you can grant or withdraw consent. It is part of, and should be read together with, our Privacy Policy.
Your rights at a glance: You can accept or reject non-essential cookies with equal ease via the banner that appears on your first visit. You can change your decision at any time using the Cookie Preferences button below or in the site footer. Strictly-necessary cookies (login, language, CSRF) are always on — the site cannot function without them.
Manage your preferences
Open the consent panel to grant or withdraw consent per category. Your choice is stored in a tw_consent cookie for 12 months and we will re-prompt you when material changes are made to this policy.
1. What is a cookie?
A cookie is a small text file that a website saves on your browser. Some cookies are essential for the site to work; others remember your choices, measure performance, or — when you give consent — let advertising and affiliate networks track conversions across sites. We also include in this policy similar technologies like localStorage, sessionStorage, and pixel tags, since their privacy implications are equivalent.
2. Categories we use
Strictly necessaryAlways on
Required for the site to function. Cannot be disabled in your settings because the site would break without them. They do not track you across other sites.
FunctionalOptional
Remember your preferences (theme, recent searches, saved filters) so the site feels personalised on return visits. Disabling them resets your preferences each session.
AnalyticsOptional
Aggregate, anonymised data about how visitors use the site. We use this only to improve content and product decisions; we do not sell or share analytics data with third-party advertisers.
Marketing & affiliateOptional
Cookies and pixels set by booking partners (Booking.com, TripAdvisor, Expedia, Skyscanner, etc.) when you click an affiliate link, plus any ad-network or social-media remarketing tags we add in future. These cookies do not load until you opt in to this category.
3. Cookies we currently set
| Name | Provider | Category | Purpose | Expires |
|---|---|---|---|---|
access_token | tripswaves.com | Strictly necessary | HttpOnly session token after login. Required to keep you signed in. | 30 minutes |
NEXT_LOCALE | tripswaves.com | Strictly necessary | Language preference so we serve the right localised content. | 1 year |
tw_consent | tripswaves.com | Strictly necessary | Stores your cookie-consent decision so we don't prompt you on every page. | 12 months |
theme (localStorage) | tripswaves.com | Functional | Remembers light/dark theme choice across visits. | Until cleared |
__cf_bm | Cloudflare | Strictly necessary | Bot-management challenge. Required by our edge provider for security. | 30 minutes |
What we'll add when you opt in
The following partners will set cookies onlyafter you opt in to the "Marketing & affiliate" category. We list them here proactively so the policy is correct at the moment we wire each partner up.
| Partner | Triggered by | Their privacy policy |
|---|---|---|
| Booking.com (B.com Affiliate Partner Programme) | Clicking a hotel link out to booking.com | booking.com/privacy |
| TripAdvisor (Affiliate) | Clicking a TripAdvisor review or hotel link | tripadvisor.com/privacy |
| Expedia Group | Clicking an Expedia hotel/flight link | expedia.com/privacy |
| Skyscanner | Clicking a flight comparison link | skyscanner.net/privacy |
4. How we ask for consent
On your first visit you will see a banner with three equal-prominence buttons:
- Accept all — opts you in to every category.
- Reject all — keeps strictly necessary on, declines everything else.
- Customise — opens a panel where you toggle each category individually.
No optional cookies, scripts, pixels, or local-storage entries are written until you make a choice (CJEU Planet49, Case C-673/17). Your decision is stored in the tw_consent cookie along with a policy version, so we re-prompt only when this policy materially changes.
5. Withdrawing or changing consent
Click the Cookie Preferences link in the site footer (or the panel above) at any time. Withdrawing consent in a category causes us to:
- stop loading any partner script in that category on subsequent navigations;
- delete the corresponding cookies/local-storage entries from your browser;
- respect the new choice without you needing to re-authenticate.
You can also delete cookies directly via your browser settings — every major browser exposes this. Doing so will sign you out of TripWave and reset your preferences.
6. Do Not Track and Global Privacy Control
There is no consensus standard for "Do Not Track" (DNT) browser headers, so we do not respond to them. We dohonour the Global Privacy Control (GPC) signal — when your browser sends GPC, we treat it as a request to opt out of any future sale or share of personal data under California's CCPA/CPRA, which we do not currently engage in anyway.
7. International transfers
Some cookie data is processed by service providers outside your country of residence (Cloudflare and DigitalOcean — both US-headquartered with EU infrastructure; Resend — US). These transfers are safeguarded by the EU Standard Contractual Clauses (SCCs) where required.
8. Changes to this policy
We will publish material changes here and re-prompt you for consent. Minor edits — typos, contact details, vendor name updates — are reflected via the "Last Updated" date at the top.
9. Contact
For privacy or cookie questions: [email protected]