Cookie Policy
1. The short version
We use cookies only to make the service work and to keep it secure. We do not use cookies to advertise to you, and we do not use them to build a profile of you or follow you around the web.
That means there is no consent banner to click through, because there is nothing optional to consent to.
2. Who this applies to
This policy covers the Tourbox traveller app and the trip pages your tour operator shares with you.
If you are a tour operator using Tourbox to run your business, see the Operator Cookie Policy instead.
3. What a cookie is
A cookie is a small file a website asks your browser to keep. On your next visit the browser sends it back, which is how a site can recognise your session. Some are deleted when you close the browser, others last a set time.
Other technologies do a similar job. Where we mention cookies below, we mean those too.
4. The cookies we use
All of these are strictly necessary, which is the category that does not require consent under the UK Privacy and Electronic Communications Regulations.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
hanko | Tourbox, via our authentication provider Hanko | Keeps you signed in as you move between pages. Without it you would have to prove who you are on every click. | Until it expires or you sign out |
__cf_bm | Cloudflare | Tells automated traffic from real visitors, which protects the service from bots and scraping. | 30 minutes |
cf_clearance | Cloudflare | Records that a visitor has passed a security check, so you are not asked again on every page. Set only if a check is actually shown to you. | Up to 1 year |
The Cloudflare cookies are set by our security provider rather than by us. Cloudflare does not use them for advertising. You can read Cloudflare's own description of them.
5. What we do not use
- No advertising cookies. We do not run ads and we do not share data with ad networks.
- No cross-site tracking. Nothing we set follows you to other websites.
- No third-party analytics cookies. We do count page views on trip pages so we know the service is working, but the tool we use for it, Umami, is cookieless. It sets nothing on your device, does not use a device fingerprint, and does not build a profile of you.
- No social media pixels.
6. Cookies your tour operator may add
Your operator may share links to their own website, booking system or payment provider. Once you follow a link away from Tourbox, that site's own cookie policy applies, not this one. We have no control over what those sites set.
7. Controlling cookies
You can delete or block cookies in your browser settings. Every major browser lets you do this, and most let you do it per site.
Be aware that blocking the hanko cookie will stop you signing in, because there would be nothing to remember that you had. Blocking the Cloudflare cookies may mean you are asked to pass a security check more often.
Browser instructions: Chrome, Safari, Firefox, Edge.
8. Changes to this policy
If we start using a cookie that is not listed above, we will add it here and update the date at the top. If we ever introduce something optional, we will ask you first.
9. Contact us
Tourbox Systems Limited 125 Freshfield Road, Brighton, England, BN2 0BR Email: privacy@tourbox.com
Related: Privacy Policy and Terms of Use.