Legal
Cookie Policy
Last updated: May 20, 2026
1. What this page covers
This policy explains what cookies and similar local-storage technologies Naverix uses, why we use them, and how you can control them.
2. Strictly necessary
We store a small set of values in your browser's localStorage to keep you signed in (access token, refresh token, cached profile). These can't be turned off without breaking sign-in.
3. Preferences
We remember UI preferences you set inside the app — sidebar state, currency, language — so the product feels consistent across sessions.
4. Analytics
We use Google Analytics, a third-party service provided by Google, to understand how the site is used. These cookies are set only if you accept analytics cookies, and nothing is sent to Google before you do. You can change your mind at any time from the Cookie preferences link in the footer.
5. Third parties
Payments are handled by Stripe and maps by Mapbox. Neither sets a cookie on this site until you actually open a payment form or load a map; when you do, they set their own cookies on their own domains under their own policies, which we do not control. Requests to our AI providers carry no cookies.
6. Your choices
You can clear browser storage at any time from your browser's privacy settings, or use the 'Cookie preferences' link in the footer to reopen the consent banner. Clearing storage signs you out and resets preferences.
7. Questions
Email privacy@naverix.travel for anything related to this policy.
What we store
Every value Naverix writes to your browser is listed below. Identifiers (left column) are technical names you can verify in your browser DevTools under Application → Cookies / Local Storage.
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
| naverix_cookie_consent | Cookie | Records your accept/reject choice from the cookie banner. | 1 year | Consent record |
| naverix.cookieConsent | localStorage | Same choice, mirrored to localStorage as a fallback when cookies are blocked. | Until cleared | Consent record |
| accessToken | localStorage | Short-lived authentication token sent on each API request. | 20 minutes | Strictly necessary |
| refreshToken | localStorage | Long-lived token used to get a new access token without re-signing in. | 30 days | Strictly necessary |
| user | localStorage | Cached profile (name, avatar, language) so the dashboard renders instantly while we revalidate. | Until sign-out | Strictly necessary |
| naverix_locale | localStorage | The interface language you last picked. | Until cleared | Preferences |
| _ga | Cookie | Google Analytics — distinguishes unique visitors. Only set after you click Accept. | 2 years | Analytics (opt-in) |
| _ga_<container-id> | Cookie | Google Analytics — per-property session state. Only set after you click Accept. | 2 years | Analytics (opt-in) |