RoundTrips uses cookies and similar technologies (local storage, pixels) to run the service, understand how it's used, and fund ongoing development through affiliate bookings. This page explains exactly what we set, why, and how to turn things off. Cookies we use are grouped into four categories: Essential, Analytics, Affiliate, and Preferences.
02Essential / authentication.
These cookies are required for RoundTrips to work. Without them you can't log in or save a trip. They can't be turned off within the app.
- sb-access-token, sb-refresh-token — set by Supabase Auth to keep you logged in across page loads. Expire based on session activity; cleared when you log out.
- __cf_bm — set by Cloudflare to distinguish humans from bots. Session-only.
- rt_session — a first-party session identifier used to tie requests together on our servers. First-party, HTTPS-only.
03Analytics.
We use Google Analytics to measure aggregate traffic — page views, session duration, approximate geography, and flow through the site. No personally identifying information is sent to Google from our application.
- _ga — distinguishes unique users. Lifetime: 2 years.
- _ga_<property-id> — used by Google Analytics 4 to persist session state. Lifetime: 2 years.
- _gid — distinguishes users within a 24-hour window. Lifetime: 1 day.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by blocking third-party cookies in your browser.
04Affiliate tracking.
When you click an outbound booking link (e.g., to a hotel, activity, or tour), our partner may set cookies so that if you complete a booking on their site, RoundTrips receives an affiliate commission. These cookies do not identify you personally to us — we only see aggregated, anonymized conversion reports. The commission does not change the price you pay.
Current affiliate partners that may set cookies after an outbound click:
- Viator — tours and activities. See Viator privacy policy.
- G Adventures — group tours. See G Adventures privacy policy.
- Booking.com — hotels and accommodation. See Booking.com privacy policy.
- Expedia / Hotels.com — accommodation and flights. See Expedia privacy policy.
- Amazon Associates — when we link to travel gear. See Amazon privacy policy.
To avoid affiliate tracking, don't click outbound booking links from RoundTrips — search for the property directly instead.
05Session & preferences.
We use local storage (not cookies) to remember small things that make the product nicer to use: dark-mode preference, collapsed sidebar state, the last trip you opened, and a dismissed-banner flag so we don't show the same notice twice.
- rt.prefs.theme — your theme preference (light/dark/system).
- rt.prefs.lastTrip — the ID of the last trip you viewed, for "recently opened".
- rt.ui.banners — dismissed notices and announcements.
Clearing site data in your browser will remove all of these.
06Third-party cookies.
Some features load resources from third parties who may set their own cookies:
- Google Fonts — serves the typefaces used on RoundTrips. Does not set identifying cookies in most configurations.
- Cloudflare — delivery and DDoS protection (see Essential above).
- Embedded maps / media — when a trip includes an embedded map or video, the host (e.g., Mapbox, YouTube) may set cookies when that content loads.
07Your choices.
Your main controls:
- Decline non-essential cookies — when we show a cookie banner, choose "Essential only" to skip analytics and non-required cookies.
- Clear cookies — clear cookies and site data from your browser at any time. You'll be logged out and preferences will reset.
- Opt out of Google Analytics — install Google's opt-out add-on or block third-party cookies.
- Avoid affiliate cookies — don't click outbound booking links; search partner sites directly.
08Browser controls.
Every major browser lets you review, block, and delete cookies. Paths vary by version; current help pages:
Blocking essential cookies will break login. Blocking all third-party cookies will disable Google Analytics and affiliate tracking while still letting you use the app.
09Do Not Track.
Our site does not currently respond to Do Not Track (DNT) signals because there is no consistent industry standard for how to interpret them. You can still use the controls above to opt out of analytics and affiliate tracking.
10Changes.
We may update this policy as we add or remove services. When we make material changes we'll update the "Last updated" date above and, for significant changes, notify account holders by email.
11Contact us.
Questions about cookies, analytics, or affiliate links? Email partnership@thehowtonetwork.com. Real humans read every message.