— Legal
Cookie policy
The cookies and browser storage Pavilia uses, what each is for, and how long it lasts. Analytics cookies are set only if you accept analytics.
Last updated
Strictly necessary
These are always on. Without them we cannot sign you in or remember a choice you made, so they are not behind the analytics choice.
| Cookie | Who sets it, and why | How long |
|---|---|---|
| __session | Pavilia, through Auth0: keeps you signed in. Split into __session__0, __session__1 and so on when it is large | 1 day after you were last active, 3 days at most |
| __txn_… | Pavilia, through Auth0: protects a sign-in in progress against forgery | 1 hour, and removed when sign-in finishes |
| pavilia_consent | Pavilia: remembers whether you accepted or refused analytics | 1 year |
| theme | Pavilia: remembers light or dark appearance | 1 year |
| pavilia_m_from | Pavilia: remembers the last app screen you were on, so a web page can link you back to it | 1 hour |
Analytics, only if you accept
Nothing below is set until you accept analytics, and it is removed from your browser if you later turn analytics off.
| Cookie | Who sets it, and why | How long |
|---|---|---|
| ph_…_posthog | PostHog: a random identifier and session details for product analytics and session replay. Also kept in local storage. Data is stored by PostHog in the EU (Frankfurt, Germany). | 1 year |
Browser storage
Some pages keep a draft or a setting in your browser’s own storage rather than in a cookie. It stays on your device and is not sent to us by itself.
| Key | What it holds | How long |
|---|---|---|
| pavilia-trip-store | Session storage: your picks in the trip builder, so a reload does not lose them | Until you close the tab |
| pavilia.plan.draftDescription | Session storage: a trip description you typed before signing in, so it survives the sign-in | Until you close the tab |
| pavilia.forum.composer-draft.v1 | Session storage: a forum post you have not published yet | Until you close the tab |
| pavilia-explore-stash:… | Session storage: places you picked on a city page before starting a plan | Until you close the tab |
| pavilia:m:countdown:… | Local storage: the last trip countdown shown in the app, so the number does not replay | Until you clear site data |
Other sites
Signing in happens on Auth0’s page and paying for a tour happens on Stripe’s checkout page. Those pages, and any partner site you open from Pavilia, set their own cookies under their own policies.
Pages with a map load it from Google Maps or Apple Maps. Those services may set their own cookies while the map is on screen, under their own policies.
How to change your choice
Turn analytics on or off at any time on Your privacy choices. You can also delete cookies in your browser’s settings; if you delete pavilia_consent, we will ask again. See the Privacy Policy for everything else we collect.