Document / Cookie Policy
Cookie Policy
Last updated: October 21, 2026
This policy explains what we store in your browser, what for, how long it lasts and how you control it. It complements the Privacy Policy.
1. What cookies are
A cookie is a small file a site stores in your browser to remember something between visits. Alongside them we use two equivalent technologies, which this policy treats the same way: localStorage (persists until you clear it) and sessionStorage (cleared when you close the tab).
2. We ask for consent, we don’t just notify you
Because we use analytics and session recording, a notice is not enough: nothing optional loads until you decide. The banner lets you accept, reject or configure, and rejecting takes exactly one click, just like accepting. There are no pre-ticked boxes.
You can change your mind at any time through “Privacy preferences”, in this site’s footer and in your profile. When you withdraw consent we immediately clear the analytics identifiers from your browser.
3. Strictly necessary
Without these the site does not work, so they do not depend on your consent. They are not used to profile you or for advertising.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
viajai_privacy_consent and viajai:privacy-consent(cookie and localStorage) | ViajAI | Remember what you decided about optional cookies, so we stop asking | 6 months (after that we ask again) |
sb-…-auth-token(localStorage) | ViajAI / Supabase | Keep you signed in | Until you sign out |
| Cloudflare Turnstile cookies | Cloudflare | Tell people from bots when submitting forms. Set on Cloudflare’s domain, not ours | Session |
| Mercado Pago cookies | Mercado Pago | Process the payment and prevent fraud. Only when you open checkout | Per Mercado Pago |
To sign in with Google or with Apple we redirect you through OAuth. They manage their technical cookies. ViajAI does not store them.
4. Functional
| Name | Purpose | Duration |
|---|---|---|
viajai_app_locale(cookie and localStorage) | Remember which language you want the app in. Written only when you pick a language | 1 year |
5. Analytics and session recording (optional)
These only exist if you give express permission. PostHog traffic goes through our domain, but its data goes to the United States.
| Name | Purpose | Duration |
|---|---|---|
ph_…_posthog(cookie, localStorage and sessionStorage) | Pseudonymous device identifier, to count visits without counting you twice | 1 year |
__ph_opt_in_out_…(localStorage) | Remember whether you opted in or out of measurement | 1 year |
viajai:posthog-replay-sampled(sessionStorage) | Remember whether this session fell into the recording sample | Until you close the tab |
ph_…_window_id, ph_…_primary_window_exists(sessionStorage) | Tell apart tabs belonging to the same session | Until you close the tab |
Session recording applies to a 25% sample only, masks all text and all form fields, and is switched off entirely on your profile, in documents and in a trip’s money sections.
Error monitoring
We use Sentry to learn when the site fails. It does not record the session. This review did not find a Sentry cookie in the browser, so we do not state a name or a duration. If one appears, we will update this page.
6. What we do NOT use
- No advertising cookies. We show no advertising and sell space to nobody.
- No social media pixels. No Meta pixel, no TikTok, no LinkedIn.
- No Google Analytics. We use neither GA4 nor Google Tag Manager.
- No Google Identity Services. Signing in with Google is an OAuth redirect. We do not load that SDK.
- No cross-site tracking. We do not combine your activity with other sites or third-party apps.
7. How to control them yourself
The simplest route is the “Privacy preferences” button in the site footer. Your browser also lets you block or delete cookies:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Safari: Settings → Privacy → Manage website data. On iPhone: Settings → Safari → Advanced → Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions.
Note that if you block strictly necessary cookies you will not be able to sign in or pay.
8. Do Not Track and Global Privacy Control
Since we do no cross-site tracking, there is nothing for a Do Not Track signal to stop: the outcome is the same whether you send it or not. We honour the Global Privacy Control (GPC) signal wherever the law recognises it as a valid opt-out request.
9. Changes and contact
If we add, remove or change the purpose of any cookie, we will update this page and its date, and ask for your consent again if the new cookie is optional.
Questions: privacidad@viajai.cl.