Cookie Policy

This policy explains how ODDO TRANSFER uses cookies, local storage and similar technologies on the website and booking platform.

25 September 2026

You can accept all, reject non-essential cookies, or manage preferences through the cookie banner and the Cookie settings link in the footer.

1) Categories

  • Strictly necessary cookies and storage keep the website, sessions, booking flow, payment flow, security and language routing working. They cannot be disabled through our banner.
  • Preference storage may remember choices such as language, booking step or interface state.
  • Analytics cookies are optional. When configured and allowed, Google Analytics measures website use and confirmed online bookings.
  • External content — Google reviews is a separate optional choice for Google ratings, reviews and author photos. It is not required for booking.
  • Marketing is not offered in these settings. Advertising storage, advertising user data, ad personalisation and Google signals remain disabled in this integration.

2) Consent and withdrawal

The first-party cookie_consent cookie remembers your choices for 183 days from a new saved decision. It records necessary, preferences, analytics, googleReviews, marketing, version and updatedAt. Necessary is always true; marketing remains false. Reading an existing choice does not renew its expiry.

This cookie records the current choice, not an independent history of earlier consent. Shared server-side review request counters are separate from this cookie and do not store review content or identify visitors.

Accept all enables the optional choices offered, including Google reviews and Analytics where configured. Reject all disables them; Save preferences saves your individual choices. Closing settings, reading a policy, scrolling or continuing a booking does not give consent. Choices saved before the Google reviews option was introduced do not enable it.

You can change or withdraw each choice through Cookie settings at any time. Refusing or withdrawing Analytics disables this integration and attempts to clear known _ga cookies and its separate analytics storage record. Withdrawing Google reviews removes their display and stops new loads, with pending requests cancelled where possible. Withdrawal cannot undo data already sent or clear Google or browser image caches.

Where reviews evidence is enabled, an explicit reviews decision also records the displayed reviews notice and interface revisions, language, server time, preceding decision and original expiry. The server stores a hash of a random browser proof and the current decision. Reading the site or opening these settings creates no such decision.

An earlier valid reviews choice without this evidence requires a dedicated reviews confirmation before embedded reviews load; it is not rewritten as a historical consent record. Reviews-only confirmation, refusal or withdrawal preserves the unrelated saved choices and their original expiry. Missing or invalid evidence stops reviews loading only.

The proof and coordination markers use the original choice expiry, at most 183 days, without renewal on reading. Expired coordination markers are ignored. Their bounded local metadata remains until a later explicit action replaces the relevant marker or browser storage is cleared; a grant never removes a denial marker. Server records become eligible for bounded deletion after expiry, except for a documented, time-limited hold. This is the retention rule, not confirmation that production deletion is already scheduled; it does not promise immediate deletion from backups.

3) Analytics privacy

This policy update does not activate Analytics. The following applies only if Analytics is separately enabled and permitted.

Google Analytics loads only after an analytics choice is granted. Page URLs sent by this integration exclude query parameters; manage/pay tokens are masked and the referring-page field is empty. See the Privacy Policy for the confirmed-booking measurement fields.

Your browser loads the Analytics tag directly from Google. Measurement requests use our website’s analytics proxy to Google and involve technical network information.

Duplicate prevention stores up to 100 hashed transaction identifiers in sessionStorage for the browser-tab session. If that storage is unavailable, it uses page memory. This separate record contains no booking form state. It is cleared on withdrawal where storage is accessible; a new session, cleared storage or renewed consent can allow another event. This does not guarantee delivery or prevent duplicates across all devices.

4) Third-party features

Google Maps and Places are used for address autocomplete, maps and route support in the booking and partner flows. myPOS and Stripe may be used during payment. These providers may use their own cookies or similar technologies on their domains during those interactions.

Where embedded Google reviews are available and separately allowed, review data loads through our server and author photos directly from Google. Image requests send your IP address and technical request information. Review data requests use no-store; review content stays in request/page memory, not our cookies, localStorage or sessionStorage. The cookie_consent cookie stores choices, not reviews. Opening a Google link does not enable either optional category. Booking address and map features are separate from the reviews choice.

A shared request allowance or temporary suspension can pause new review loads. You can still open the Google profile link. This pause does not change your saved choices or stop booking, login or payment.

Cookies and storage currently documented

The exact cookie names and durations can vary by browser, provider, payment flow and deployment configuration. Non-essential analytics cookies are only used after consent.

cookie_consent

Provider
oddotransfer.com
Category
Strictly necessary
Purpose
Remembers the current cookie and external-content choices, their version and timestamp.
Duration
183 days from a new saved choice; reading an existing choice does not extend it
Consent
No — strictly necessary to remember your choices, including refusal

oddo_reviews_receipt

Provider
oddotransfer.com
Category
Reviews choice evidence
Purpose
HttpOnly random browser proof linking an explicit reviews choice to its separate server evidence. The server stores only its hash; it is not sent to Google.
Duration
Original choice expiry, at most 183 days; no renewal on reading
Consent
Created only for an explicit reviews decision; does not itself permit loading reviews

oddo:reviews-consent-action:v1 / oddo:reviews-consent-denial:v1

Provider
oddotransfer.com
Category
Reviews choice evidence
Purpose
Bounded reviews action and denial markers coordinate active tabs and reject late approvals. They contain random action references, the decision and original expiry, not review content, account data or browsing history.
Duration
Effective only within the original choice period, at most 183 days; local metadata remains until the corresponding explicit replacement or browser storage clearing
Consent
Created only for an explicit reviews decision; does not itself permit loading reviews

NEXT_LOCALE

Provider
oddotransfer.com / next-intl
Category
Strictly necessary / preference
Purpose
Stores selected language and supports localized routing.
Duration
Typically up to 12 months
Consent
No, required for language preference

token, admin_token, partner_session, next-auth session cookies

Provider
oddotransfer.com
Category
Strictly necessary / security
Purpose
Keeps customer, admin, partner and OAuth sessions working.
Duration
Session or configured session period
Consent
No, required for account and security

Booking state localStorage

Provider
oddotransfer.com
Category
Strictly necessary / preference
Purpose
Keeps active booking, passenger, add-on and payment-flow state across steps and locale changes.
Duration
Until cleared by the app/browser or stale flow cleanup
Consent
No, required for the active booking flow

locale_switch / ODDO_LOCALE_SWITCH

Provider
oddotransfer.com
Category
Strictly necessary / preference
Purpose
Maintains booking/payment continuity during a temporary language switch.
Duration
Session / short-lived
Consent
No, required for flow continuity

Google Maps / Places storage or cookies

Provider
Google
Category
Functional
Purpose
Address autocomplete, maps, route calculation and place lookup.
Duration
Varies by Google and browser
Consent
Not controlled by analytics consent; used for requested map/address functionality

myPOS / Stripe payment cookies or storage

Provider
myPOS / Stripe
Category
Strictly necessary payment
Purpose
Secure checkout, fraud prevention, payment completion and refund/payment references.
Duration
Varies by provider and payment session
Consent
No, required for selected payment flow

_ga / _ga_*

Provider
Google Analytics
Category
Analytics
Purpose
Website-performance, usage and confirmed-booking measurement if GA is configured.
Duration
Cookie lifetime depends on Google Analytics configuration; distinct from event-data retention
Consent
Yes, only after analytics consent

oddo_analytics_purchases_v1 (sessionStorage)

Provider
oddotransfer.com
Category
Analytics
Purpose
Keeps up to 100 transaction hashes to limit repeated confirmed-booking measurement in this tab; separate from booking state.
Duration
Browser-tab session; removed on analytics withdrawal where storage is accessible
Consent
Yes, only after analytics consent
ODDO Transfer | Private Airport Transfers & Chauffeur Service