ViajDocument / Cookie Policy
Cookie Policy
Last updated: September 15, 2026
This policy explains what we store in your browser, what for, how long it lasts and how you control it. It complements the Privacy Policy.
1. What cookies are
A cookie is a small file a site stores in your browser to remember something between visits. Alongside them we use two equivalent technologies, which this policy treats the same way: localStorage (persists until you clear it) and sessionStorage (cleared when you close the tab).
2. We ask for consent, we don’t just notify you
Because we use analytics and session recording, a notice is not enough: nothing optional loads until you decide. The banner lets you accept, reject or configure, and rejecting takes exactly one click, just like accepting. There are no pre-ticked boxes.
You can change your mind at any time through “Privacy preferences”, in this site’s footer and in your profile. When you withdraw consent we immediately clear the analytics identifiers from your browser.
3. Strictly necessary
Without these the site does not work, so they do not depend on your consent. They are not used to profile you or for advertising.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
viajai_privacy_consent and viajai:privacy-consent(cookie and localStorage) | ViajAI | Remember what you decided about optional cookies, so we stop asking | 6 months (after that we ask again) |
sb-…-auth-token(localStorage) | ViajAI / Supabase | Keep you signed in | Until you sign out |
g_state | Remember that you dismissed the “Sign in with Google” prompt so it is not shown again. Only present on the sign-up and sign-in pages | 6 months | |
| Cloudflare Turnstile cookies | Cloudflare | Tell people from bots when submitting forms. Set on Cloudflare’s domain, not ours | Session |
| Mercado Pago cookies | Mercado Pago | Process the payment and prevent fraud. Only when you open checkout | Per Mercado Pago |
4. Functional
| Name | Purpose | Duration |
|---|---|---|
viajai_app_locale(cookie and localStorage) | Remember which language you want the app in. Written only when you pick a language | 1 year |
5. Analytics and session recording (optional)
These only exist if you accept them. They are set by PostHog, our analytics provider, whose servers are in the United States. Traffic is routed through our own domain, so they are not third-party cookies in the technical sense, but the data reaches PostHog.
| Name | Purpose | Duration |
|---|---|---|
ph_…_posthog(cookie, localStorage and sessionStorage) | Pseudonymous device identifier, to count visits without counting you twice | 1 year |
__ph_opt_in_out_…(localStorage) | Remember whether you opted in or out of measurement | 1 year |
viajai:posthog-replay-sampled(sessionStorage) | Remember whether this session fell into the recording sample | Until you close the tab |
ph_…_window_id, ph_…_primary_window_exists(sessionStorage) | Tell apart tabs belonging to the same session | Until you close the tab |
Session recording applies to a 25% sample only, masks all text and all form fields, and is switched off entirely on your profile, in documents and in a trip’s money sections.
6. What we do NOT use
- No advertising cookies. We show no advertising and sell space to nobody.
- No social media pixels. No Meta pixel, no TikTok, no LinkedIn.
- No Google Analytics. We use neither GA4 nor Google Tag Manager.
- No cross-site tracking. We do not combine your activity with other sites or third-party apps.
7. How to control them yourself
The simplest route is the “Privacy preferences” button in the site footer. Your browser also lets you block or delete cookies:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Safari: Settings → Privacy → Manage website data. On iPhone: Settings → Safari → Advanced → Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions.
Note that if you block strictly necessary cookies you will not be able to sign in or pay.
8. Do Not Track and Global Privacy Control
Since we do no cross-site tracking, there is nothing for a Do Not Track signal to stop: the outcome is the same whether you send it or not. We honour the Global Privacy Control (GPC) signal wherever the law recognises it as a valid opt-out request.
9. Changes and contact
If we add, remove or change the purpose of any cookie, we will update this page and its date, and ask for your consent again if the new cookie is optional.
Questions: privacidad@viajai.cl.