TripperTip is a digital travel-planning service operated by SCALYOU LLC, a Wyoming limited liability company.
This policy explains how the TripperTip website uses cookies and similar browser technologies. It should be read with our Privacy Policy.
1. How browser technologies are used
Cookies are small values stored by a browser and sent with relevant web requests. Local storage remains in the browser and is not automatically sent with each request.
TripperTip uses these technologies to operate secure account features, remember choices, and—where permitted by the applicable regional setting or your choice—measure public-page usage and advertising campaign performance.
2. Necessary technologies
These technologies support sign-in, request security, and visitor-requested preferences. They are not used for advertising and cannot all be disabled through the analytics control without breaking the requested feature.
| Name | Provider and type | Purpose | Duration |
|---|---|---|---|
| next-auth.* / secure-prefixed equivalents | TripperTip Cookie | Maintains a secure sign-in session, validates authentication callbacks, and protects sign-in requests against forgery. Names can receive __Secure- or __Host- prefixes on HTTPS. | Session or short-lived; the authenticated session token may persist for up to 30 days. |
| trippertip-consent-preferences-v4 | TripperTip Local storage | Remembers the visitor's separate analytics and marketing choices. | Up to 180 days, or until the visitor changes the choice or clears browser storage. |
| trippertip-theme | TripperTip Local storage | Remembers the visitor's light or dark appearance preference. | Until the visitor changes the preference or clears browser storage. |
| trippertip-partner-referral / trippertip-partner-visitor | TripperTip Cookie | Records a requested partner QR visit, measures scans, and connects the first eligible partner to an account when the visitor signs in or registers. | Up to 400 days before sign-in; the account attribution is permanent after activation. |
3. Optional analytics
TripperTip loads the Google tag with Consent Mode v2. Analytics storage, advertising storage, advertising user data, and ad personalization are initially denied. Before analytics is enabled, Google may receive limited cookieless consent and configuration signals, but ordinary page-view and product events remain blocked. Analytics may then be enabled by your choice or after a server-side regional policy check where this configuration uses an opt-out rule. The current opt-out analytics map covers Australia, Canada outside Quebec, Mexico, New Zealand, and the United States. Unknown locations and all other locations remain prior opt-in. Google advertising features and Google Signals remain disabled. TripperTip does not intentionally send email addresses, payment details, or free-text itinerary content to analytics.
| Name | Provider and type | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics Cookie | Distinguishes visits for aggregated site-usage and performance measurement. | Up to 180 days in TripperTip's Google tag configuration. |
| _ga_<measurement-id> | Google Analytics Cookie | Maintains session state for the configured Google Analytics property. | Up to 180 days in TripperTip's Google tag configuration. |
| _gid / _gat* (when used by Google) | Google Analytics Cookie | Supports short-lived visit measurement and request-rate controls. | Generally 24 hours or less. |
Cookie names and durations can change when a provider updates its service. See Google's cookie information and privacy policy for provider-level details.
4. Optional marketing measurement
Meta Pixel and Conversions API, and TikTok Pixel and Events API, are disabled in prior opt-in regions unless the visitor allows Marketing. The current opt-out marketing map covers Australia, Canada outside Quebec, Mexico, and the United States. New Zealand is analytics-only, so marketing measurement remains prior opt-in there. Unknown locations and all other locations remain prior opt-in. In an opt-out location, marketing measurement may be enabled after the regional policy check unless the visitor opts out or sends a recognized Global Privacy Control signal. When enabled, TripperTip may share public page visits, plan identifiers, checkout activity, confirmed purchase value and currency, an order-based deduplication ID, provider click or browser identifiers, and limited device/network context for campaign attribution. We do not share payment-card details, email addresses, or free-text itinerary content with Meta or TikTok.
| Name | Provider and type | Purpose | Duration |
|---|---|---|---|
| _fbp, _fbc | Meta Cookie | Identifies a browser and an eligible ad click for consented Meta campaign attribution, conversion measurement, and browser/server event deduplication. | Up to 90 days, according to Meta's current cookie information. |
| _ttp, ttclid, ttcsid, ttcsid_<pixel-id> | TikTok Cookie | Attributes consented visits and confirmed purchases to TikTok advertising campaigns, supports event deduplication, and measures campaign performance. | Up to 13 months from the last use, subject to TikTok's settings and browser controls. |
| trippertip-tiktok-click-id | TripperTip Local storage | Temporarily preserves a TikTok ad click identifier so a later consented checkout can be attributed accurately. | Up to 180 days, or until marketing permission is withdrawn or browser storage is cleared. |
Confirmed purchases may also be reported from TripperTip's server after Stripe verifies payment. Browser and server events use the same order-based event ID to prevent duplicate reporting. See Meta's privacy policy and cookie policy, and TikTok's privacy policy, for provider-level information.
5. Authentication and payment providers
- Google may use its own cookies when a visitor chooses Google sign-in. Those cookies are controlled by Google on its services.
- Stripe may use cookies and similar technologies on Stripe-hosted Checkout pages for session continuity, payment security, and fraud prevention.
- Following an external social-media or provider link takes the visitor to that provider's service and privacy practices.
6. Managing choices
Visitors can separately allow, decline, or later withdraw optional analytics and marketing measurement without losing access to the website or account features. Explicit choices expire after 180 days. Merely closing an opt-out notice does not create a consent record; the regional rule is checked again on a later visit. Withdrawing a category stops future events, removes related first-party cookies that TripperTip can access, and clears TripperTip's stored TikTok click identifier. A supported Global Privacy Control signal keeps both optional categories disabled.
Browser settings can also delete or block cookies and local storage. Blocking necessary authentication cookies can prevent sign-in and account features from working.
7. Policy updates
We update this policy when browser technologies, providers, purposes, or material retention periods change. The latest revision date appears at the top of this page.
Questions about this document?
Our support team can point you to the right information.