Cookie Policy
What we store in your browser, why, and the controls you have.
Last updated: 16 July 2026
1. The short version
One World Tours uses a small, first-party setof cookies: what’s needed to sign you in securely, one cookie that credits partners for referrals, and a local-storage entry for your theme preference. We use no advertising cookies and no third-party trackers.
2. Cookies we set
| Name | Type | Duration | Purpose |
|---|---|---|---|
| web_accessToken | Essential — sign-in | Short-lived (minutes) | Keeps you signed in for the current session. HTTP-only and inaccessible to scripts. |
| web_refreshToken | Essential — sign-in | Up to your session lifetime | Silently renews your session so you don't have to sign in on every visit. HTTP-only. |
| web_deviceId | Essential — security | Persistent | Identifies this browser as a device on your account so you can review and revoke sessions per device. |
| trafficSourceId | Attribution | Persistent | Records which partner or campaign link brought you to the site so registered partners are credited for referred bookings. Contains no personal profile data. |
Sign-in cookies are set only when you create an account or sign in. Browsing, searching, and sending inquiries work without them.
3. Local storage
| Key | Type | Duration | Purpose |
|---|---|---|---|
| theme | Preference (local storage) | Until you clear it | Remembers your light / dark mode choice. |
4. Third-party services
- If you choose to sign in with Google, Google sets its own cookies on its own domains under Google's privacy policy.
- Some images (for example country flags and airline logos) load from image delivery networks; these requests do not set tracking cookies for us.
- If you enable booking push notifications, your browser's push service (for example Firebase Cloud Messaging) handles delivery under its own policy. Notifications are strictly opt-in.
5. Your settings and choices
- Browser controls — you can block or delete cookies in your browser settings (Chrome, Safari, Edge, and Firefox all allow per-site rules). Deleting our cookies signs you out; blocking them prevents sign-in but browsing still works.
- Session control — from your account you can view the devices signed into your account and revoke any of them, which invalidates that device's cookies immediately.
- Push notifications — enable or disable at any time in your browser's site permissions.
- Theme — switch light / dark mode any time with the toggle in the header; clearing site data resets it.
Because we don’t use advertising or analytics cookies, there is no separate consent banner to manage — the cookies above are either strictly necessary or set only when you use the related feature. If we ever introduce analytics or marketing cookies, we will update this page and ask for your consent first.
6. More information
How we handle the personal data connected to these cookies is described in our Privacy Policy. Questions? Email info@oneworld.tours.