Legal
Cookie policy
Draft — pending lawyer review. This text describes what itnary actually does today, but it is not yet legal advice or a binding agreement. Last updated November 2026.
Only what the site needs
itnary's own cookies are strictly necessary ones. We don't use advertising cookies. Card payments run inside Stripe's secure form, which may set its own cookies to prevent fraud.
Paying for a hotel
When you book a hotel, the card form on the payment page comes from our booking partner Nuitée (it uses Stripe), which may set its own cookies to process the payment and prevent fraud. It runs only on that page.
The cookies we set
| Name | Why | How long |
|---|---|---|
| authjs.session-token | Keeps you signed in (an encrypted session). | Until you sign out, up to 30 days |
| authjs.csrf-token, authjs.callback-url | Protect sign-in and send you back to the page you came from. | Session |
| supplier_lang | Supplier portal language (Hebrew or English). | 1 year |
| supplier_current | Which business a supplier user is managing. | 1 year |
Offline tickets
If you install itnary on your phone, its offline copy of your Trip Wallet and Today pages is kept in your browser's storage, on your device only. Signing out or clearing site data removes it.