Cookie Policy

Cookies are small text files stored in your browser when you visit a site. They are used to recognize devices, keep sessions, remember preferences, measure usage, prevent fraud and personalize content.

Similar technologies include local storage, session storage, pixels, web beacons and device identifiers. For the purposes of this policy we treat all as "cookies" in the broad sense.

Strictly necessary: indispensable for authentication, security and essential functioning of the service. They cannot be disabled — doing so breaks login and core features.

Preferences: store language, region, theme (light/dark) and other choices that make the experience consistent.

Analytics: help us understand aggregated usage, performance and bottlenecks. Whenever possible, we use privacy-friendly forms with anonymized IP and no cross-site tracking.

Marketing and affiliates: allow us to measure campaign performance, attribute affiliate clicks to partners such as Travelpayouts and measure conversions on social networks when active.

Below is the list of the most relevant cookies used by Voyspark or its partners. The list may be updated as integrations come and go; the current state is always the latest version of this policy.

By using "Sign in with Google", Voyspark relies on Google’s OAuth 2.0 flow. During that flow, Google may set cookies such as NID, SID, SAPISID and __Secure-3PSID, strictly for authentication, attack prevention (CSRF, XSS) and protection of your Google account.

These cookies are set by google.com / accounts.google.com and are subject to Google’s Privacy Policy. Voyspark has no access to the contents of these cookies; we only receive the resulting identity token (ID token), as detailed in the Privacy Policy.

You can revoke Voyspark’s access to your Google account at any time at myaccount.google.com/permissions.

When you click a booking link (flight, hotel, experience, insurance), the partner may set an attribution cookie that signals the referral came from Voyspark. This cookie is used by the partner to credit us with the commission.

These cookies do not contain nominal personal data; in general they only store an anonymous click identifier (sub_id) and a timestamp. Even without accepting the cookies, the link still works — only commission attribution may be lost.

Our own pixel domain: track.voyspark.com. It is used to measure clicks, conversions and funnels internally, without crossing data with external ad platforms.

Voyspark consent banner: on your first visit we show a banner with "Accept all", "Only necessary" or "Customize". Your choice is recorded and can be reviewed at any time at /account/settings or via the "Cookies" link in the footer.

Browser: you can block or delete cookies through your browser settings (Chrome, Safari, Firefox, Edge, Brave). Note that blocking strictly necessary cookies breaks login and core features.

Analytics opt-out: for Google Analytics you can use the official add-on at tools.google.com/dlpage/gaoptout. For our own pixel, simply choose "Only necessary" in the banner.

Currently, "Do Not Track" has no universal technical standard. We honor Global Privacy Control (GPC) signals when sent, treating them as "Only necessary" choices in jurisdictions where GPC has legal force (e.g., California).

This policy may be updated to reflect new integrations or regulatory changes. Material changes will be communicated 15 days in advance by email and/or a prominent notice.

Questions: privacy@voyspark.com. For formal data protection matters, contact the DPO at dpo@voyspark.com.