Cookie Policy
Last updated 2026-06-29
Cookies are small files stored in your browser. We use them to keep you signed in, remember your choices, and (with your consent) measure usage and improve Triprr.
Your choices
Strictly necessary cookies are always on. You can accept or reject preferences, analytics, and marketing cookies separately, and change your mind at any time via Cookie settings in the footer.
Cookies we use
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| sb-*-auth-token | Triprr (Supabase) | Strictly necessary | Keeps you signed in. | Until sign-out |
| __triprr_consent | Triprr | Strictly necessary | Remembers your cookie choices. | 12 months |
| triprr.locale | Triprr | Preferences | Remembers your selected language. | 12 months |
| triprr.consent.v1 (localStorage) | Triprr | Strictly necessary | Full record of your consent choices. | 12 months |
| triprr_acq | Triprr | Marketing | Signed receipt for the campaign link you arrived through, so the plan you start can be connected to it once. | 30 minutes (deleted as soon as it is used) |
| triprr.growth.acq_receipt.v1 (sessionStorage) | Triprr | Marketing | Holds that arrival receipt for this browser tab only, until you start a plan or close the tab. | This tab / 30 minutes |
Measuring which campaign brought you here
Only if you allow marketing cookies: when you arrive through a Triprr campaign link, we record which link you used, the page you landed on, the website address you arrived at, and the time. A short-lived cookie called triprr_acq carries a signed receipt for that arrival for up to 30 minutes and is moved into your browser tab's own storage (triprr.growth.acq_receipt.v1) and then deleted. If you start a plan within those 30 minutes, the arrival is recorded once against that plan, and stays connected to it if you later sign in — even after the 30 minutes have passed. Nothing is recorded before you allow marketing cookies, and we never use fingerprints or follow you across devices.
How long we keep arrival records
Arrival records are kept for at most 90 days from the moment of arrival. That period never restarts — not when you start a plan, sign in, create a trip or come back. After it ends we stop using the record immediately and delete it automatically, normally within an hour and always within 24 hours. If you withdraw marketing consent, we stop using your arrival records straight away, cancel any pending arrival receipt and delete the records we hold for you. Withdrawal never affects your account, your plans, your trips, your wallet or your bookings. Deleted arrival records are not restored by giving consent again; only new arrivals can be measured. Encrypted backups roll for 30 days, so a record can persist there for a short time before the backup is overwritten; a restored backup does not bring the deletion back into use.
Browser controls
You can also block or delete cookies in your browser settings. Disabling strictly necessary cookies will break sign-in.