Cookie policy
Last updated: 24 May 2026
1. What cookies are
A cookie is a small text file placed on your device by a website to remember preferences or context between visits. This policy explains exactly which cookies IoCarta uses, why we use them, and how to control them.
For information about how we process the personal data you provide directly, see our Privacy Policy.
2. Your choices: Strictly necessary, Analytics, Advertising
On your first visit you'll see a consent banner. We split cookies into three categories so you can decide what to allow:
- Strictly necessary — always on. Required to keep the site functional and secure. We cannot operate without these.
- Analytics — Google Analytics 4 (anonymous IP) so we can see which deals and pages are useful. Off by default.
- Advertising — we currently run no advertising tags. Off by default and has no effect on you whether on or off.
We use Google Consent Mode v2, which means all analytics and advertising signals stay denied unless you explicitly allow them. You can change your mind at any time by clicking Manage cookies in the footer.
3. Cookies and storage we set
| Name | Purpose | Duration | Category |
|---|---|---|---|
| iocarta_consent_v1 | Stores your cookie-banner choices (which categories you allowed). Local-storage entry, not transmitted with requests. | Until cleared | Strictly necessary |
| iocarta_subscribed | Suppresses the subscribe popup for users who have already signed up. Local-storage entry. | Until cleared | Strictly necessary |
| iocarta_popup_dismissed | Suppresses the subscribe popup for users who have dismissed it. Local-storage entry. | 30 days | Strictly necessary |
| _ga, _ga_* | Google Analytics 4 — counts visits, distinguishes returning users, anonymized IP. Set only after you accept analytics. | 2 years | Analytics |
| _gid | Google Analytics 4 — distinguishes users within a 24-hour window. Set only after you accept analytics. | 24 hours | Analytics |
| __cf_bm | Cloudflare bot management — distinguishes humans from automated traffic. Set by our infrastructure layer. | 30 minutes | Strictly necessary |
We use Google Tag Manager as the container that loads our analytics and (potentially in the future) conversion tags. GTM itself does not store cookies until a tag it controls is fired — and tags only fire for categories you have accepted.
4. Cookies set by booking partners
When you click a deal link, you leave IoCarta and arrive on a partner's site (typically Aviasales or Travelpayouts). The partner sets its own cookies under its own domain — these are governed by the partner's cookie policy, not ours.
One of those cookies records that the visit originated from IoCarta so the partner can credit our commission if you book. This cookie is set under the partner's domain and contains an anonymous click identifier — never personal data we hold.
5. How to control or delete cookies
You can revisit and change your IoCarta cookie choices at any time via the Manage cookies link in the footer of every page. To delete cookies entirely or block them at the browser level, follow the instructions for your browser:
Clearing the iocarta_consent_v1 entry will show you the banner again on your next visit.
6. Updates to this policy
We will update this policy if we introduce new cookies or tags. The "Last updated" date above reflects the most recent revision. Material changes will also re-trigger the consent banner.
7. Contact
Questions about cookies? privacy@iocarta.com.