← Back to Home

COOKIE POLICY

Last Updated: December 17, 2025

Effective Date: October 20, 2025

1. INTRODUCTION

This Cookie Policy explains how Cloudvante Pty Ltd (ABN 28 681 142 683, ACN 681 142 683, "TravlAgent," "we," "us," or "our") uses cookies and similar tracking technologies on our website at https://travlagent.com and https://app.travlagent.com, and our mobile applications for iOS and Android (collectively, the "Service").

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

By using the Service, you consent to the use of cookies as described in this Cookie Policy, subject to your cookie preferences and applicable law.

2. WHAT ARE COOKIES?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) by websites you visit or apps you use. Cookies are widely used to make websites and apps work more efficiently, provide a better user experience, and provide information to website owners.

Types of Cookies by Lifespan:

  • Session Cookies: Temporary cookies that expire when you close your browser or app. They help you navigate the Service efficiently.
  • Persistent Cookies: Remain on your device for a set period or until you delete them. They remember your preferences and actions across sessions.

Types of Cookies by Purpose:

  • First-Party Cookies: Set by TravlAgent directly when you use our Service.
  • Third-Party Cookies: Set by external services we use (e.g., Cloudflare for security and infrastructure).

3. SIMILAR TECHNOLOGIES

In addition to cookies, we use other tracking technologies:

Local Storage: HTML5 local storage allows us to store data locally in your browser for performance and functionality.

Session Storage: Stores data for the duration of your session and is deleted when you close your browser.

Mobile Device Identifiers:

  • iOS: IDFA (Identifier for Advertisers) - collected only with your explicit consent via App Tracking Transparency (ATT) prompt
  • Android: Android Advertising ID - can be reset or disabled in device settings

Pixels and Web Beacons: Small invisible images embedded in emails or web pages to track whether content has been viewed.

4. COOKIES WE USE

We use cookies for the following purposes:

4.1 Strictly Necessary Cookies (Always Active)

These cookies are essential for the Service to function and cannot be disabled without severely affecting your ability to use the Service.

| Cookie Name | Purpose | Duration | Type |

|-------------|---------|----------|------|

| `session_token` / `auth_token` | Authenticates your login session and keeps you logged in | Session / 7 days | First-party |

| `csrf_token` | Prevents Cross-Site Request Forgery (CSRF) attacks for security | Session | First-party |

| `__cf_bm` | Cloudflare bot management - distinguishes humans from bots | 30 minutes | Third-party (Cloudflare) |

Lawful Basis (GDPR): Legitimate interest and contract performance - these cookies are strictly necessary to provide the Service.

You cannot opt out of strictly necessary cookies. Blocking them may prevent you from accessing or using portions of the Service.

4.2 Functional Cookies (Enabled by Default)

These cookies enable enhanced functionality and personalization, such as remembering your preferences.

| Cookie Name | Purpose | Duration | Type |

|-------------|---------|----------|------|

| `user_preferences` | Stores your temperature unit preference (C/F), language, and other settings | 1 year | First-party |

| `timezone` | Remembers your timezone for accurate date/time display | 1 year | First-party |

| `theme_preference` | Stores your UI theme preference (if dark mode feature exists) | 1 year | First-party |

Lawful Basis (GDPR): Legitimate interest - improves user experience.

You can disable functional cookies through browser settings, but this may impact your experience (e.g., preferences won't be remembered).

4.3 Analytics and Performance Cookies (Require Consent in EU/EEA/UK)

These cookies collect information about how you use the Service to help us improve performance and user experience. Data is typically aggregated and anonymized.

| Cookie Name | Purpose | Duration | Type |

|-------------|---------|----------|------|

| `_analytics_session` | Tracks session activity for analytics purposes | Session | First-party |

| `usage_stats` | Collects anonymized usage statistics (features used, pages viewed) | 90 days | First-party |

| `performance_metrics` | Measures page load times and Service performance | 30 days | First-party |

| Cloudflare Analytics | Cloudflare may collect analytics data through their infrastructure | Varies | Third-party (Cloudflare) |

Lawful Basis (GDPR): Consent (for EU/EEA/UK users).

You can opt out of analytics cookies via our cookie consent banner (EU/EEA/UK) or browser settings.

4.4 Advertising and Targeting Cookies (NOT CURRENTLY USED)

We do NOT currently use advertising, marketing, or targeting cookies.

If we introduce advertising or marketing cookies in the future, we will:

  • Update this Cookie Policy
  • Obtain your explicit consent (opt-in) where required by law
  • Provide clear opt-out mechanisms

5. THIRD-PARTY COOKIES

Some cookies are set by third-party services we use to provide the Service:

5.1 Cloudflare

Purpose: DDoS protection, content delivery network (CDN), infrastructure security

Cookies Set:

  • `__cf_bm` - Bot management
  • `__cflb` - Load balancing
  • `cf_clearance` - Security challenge validation

Privacy Policy: https://www.cloudflare.com/privacypolicy/

Control: These cookies are necessary for security and cannot be disabled without impacting Service availability.

5.2 Google OAuth (If Using Google Sign-In)

Purpose: Social login authentication

Cookies Set: Google may set cookies during the OAuth authentication process

Privacy Policy: https://policies.google.com/privacy

Control: These cookies are used only when you choose to sign in with Google.

5.3 Apple Sign-In (If Using Apple Sign-In)

Purpose: Social login authentication

Privacy Policy: https://www.apple.com/legal/privacy/

Control: These cookies are used only when you choose to sign in with Apple.

6. HOW TO MANAGE COOKIES

You have several options to control and manage cookies:

6.1 Cookie Consent Banner (EU/EEA/UK Users)

Current Implementation:

As a growing startup, we are implementing cookie consent management tools progressively. Currently:

  • We use only strictly necessary and functional cookies by default
  • Non-essential analytics cookies are not active until we implement a consent banner
  • You can manage all cookie preferences via browser settings (see Section 6.2 below)

To Opt Out of Non-Essential Cookies:

Email support@travlagent.com with "Cookie Opt-Out" in the subject line, and we will ensure no analytics or performance cookies are set for your account.

Future Implementation:

We will implement a cookie consent banner for EU/EEA/UK visitors as we scale. This will allow you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customize your cookie preferences (choose which categories to enable)

6.2 Browser Settings

Most web browsers allow you to control cookies through settings. You can:

  • Block all cookies
  • Block third-party cookies only
  • Delete cookies after each session
  • Receive notifications when cookies are set

How to manage cookies in popular browsers:

Google Chrome:

1. Settings > Privacy and security > Cookies and other site data

2. Choose your preferred setting

Mozilla Firefox:

1. Settings > Privacy & Security > Cookies and Site Data

2. Choose your preferred setting

Safari (Mac):

1. Preferences > Privacy

2. Manage cookies and website data

Microsoft Edge:

1. Settings > Cookies and site permissions > Cookies and site data

2. Choose your preferred setting

Safari (iOS):

1. Settings > Safari > Block All Cookies

2. Or use "Prevent Cross-Site Tracking"

Chrome (Android):

1. Chrome app > Settings > Site settings > Cookies

2. Choose your preferred setting

Note: Blocking strictly necessary cookies will prevent you from using the Service.

6.3 Global Privacy Control (GPC)

For California Users: We honor Global Privacy Control (GPC) signals where technically feasible as an automatic opt-out of the "sale" or "sharing" of personal information under CCPA/CPRA.

How to Opt Out:

Option 1: Enable GPC in Your Browser

  • Use a browser that supports GPC (e.g., Brave, Firefox with Privacy Badger, DuckDuckGo)
  • Enable GPC in browser settings
  • Visit our Service - we will detect and honor your GPC signal where implemented

Option 2: Email Opt-Out (Available Now)

  • Email support@travlagent.com with "Opt Out of Data Sharing" in the subject line
  • Include your registered email address
  • We will process your opt-out within 15 business days
  • You will receive confirmation via email

What Opting Out Means:

  • We will not share your personal information with third parties for non-essential purposes
  • Analytics and advertising cookies will be disabled for your account
  • This does not affect essential Service functionality

6.4 Mobile App Settings

iOS Apps:

  • Settings > Privacy > Tracking
  • Disable "Allow Apps to Request to Track" to prevent tracking across apps
  • You will be prompted via ATT (App Tracking Transparency) when you first open the app

Android Apps:

  • Settings > Google > Ads
  • Enable "Opt out of Ads Personalization"
  • Reset Advertising ID to clear tracking history

6.5 Email Preferences

If we send emails (e.g., trip invitations via Postmark), we may use tracking pixels to measure email opens and link clicks for operational purposes.

You cannot opt out of transactional emails (account verification, trip invitations you requested), but we minimize tracking in these messages.

7. DO NOT TRACK (DNT)

Some browsers offer a "Do Not Track" (DNT) signal that requests websites not to track your browsing activity.

Our DNT Policy: We do not currently respond to DNT signals because there is no universal industry standard for how to interpret and respond to DNT.

However, we DO honor Global Privacy Control (GPC) signals for California users as an opt-out mechanism under CCPA/CPRA.

8. COOKIES AND YOUR PRIVACY RIGHTS

Your use of cookies is connected to your broader privacy rights:

EU/EEA/UK Users (GDPR and ePrivacy Directive):

  • Non-essential cookies require your explicit consent (opt-in)
  • You have the right to withdraw consent at any time
  • You can object to processing based on legitimate interests

California Users (CCPA/CPRA):

  • Certain cookies may constitute "sale" or "sharing" of personal information
  • You have the right to opt out (via GPC or cookie settings)
  • We do not currently use cookies for cross-context behavioral advertising

Australian Users (Privacy Act):

  • You can manage cookies via browser settings
  • Cookies are subject to APP 5 (notification of collection) and APP 6 (use and disclosure)

For more information about your privacy rights, see our Privacy Policy.

9. UPDATES TO THIS COOKIE POLICY

We may update this Cookie Policy from time to time to reflect:

  • Changes in our use of cookies
  • New technologies or tracking methods
  • Legal or regulatory requirements
  • Feedback from users

When we make material changes:

  • We will update the "Last Updated" date at the top of this policy
  • We may notify you via email or in-app notification
  • EU/EEA/UK users will be prompted to re-consent if required

Your continued use of the Service after changes take effect constitutes acceptance of the updated Cookie Policy.

10. CONTACT US

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Cloudvante Pty Ltd

ABN: 28 681 142 683

ACN: 681 142 683

Address: 470 St Kilda Road, Melbourne, VIC 3004, Australia

Email: support@travlagent.com

Website: https://travlagent.com

For privacy-related inquiries, see our Privacy Policy Section 14 for additional contact information and supervisory authorities.

11. ADDITIONAL RESOURCES

Learn More About Cookies:

  • All About Cookies: https://www.allaboutcookies.org
  • European Commission (ePrivacy): https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/cookies-and-other-tracking-tools_en
  • OAIC (Australia): https://www.oaic.gov.au

Browser Privacy Settings:

  • Chrome: https://support.google.com/chrome/answer/95647
  • Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
  • Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
  • Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

END OF COOKIE POLICY

Version 1.0

Copyright © 2025 Cloudvante Pty Ltd. All rights reserved.

Summary: TravlAgent uses cookies to provide and improve the Service. Strictly necessary cookies (authentication, security) cannot be disabled. Functional and analytics cookies can be managed via browser settings or our cookie consent banner (EU/EEA/UK users). We do not currently use advertising cookies. For more information, contact support@travlagent.com.