Cookie Policy

NECESSARY STORAGE

• mandra-trips-v1 stores a guest trip copy; mandra-language stores language; gleri-public-theme stores theme. They have no programmed expiry. Supabase stores the technical session in browser storage that remains between visits; session duration is determined by the authentication provider.
• gleri-public-loader-seen and gleri-bear-greeting-shown last only for the browser session. Private preview and Android authorization cookies are strictly technical: private access lasts 30 days and the Android confirmation lasts up to one hour.

CONSENT FOR TECHNICAL ANALYTICS

The consent choice is stored in localStorage under gleri-privacy-consent and in the gleri_consent cookie. The choice is valid for 180 days and may record consent or refusal; after that period or a consent-version change, the user must choose again because the browser does not automatically delete the stored value. Analytics runs only after consent; necessary security measures may run without it under Article 6(1)(f) GDPR.

After consent, GLERI sends only a path template with the sharing key removed, general performance metrics and generic errors without trip content, search parameters or raw messages. You can withdraw the choice in settings.

EXTERNAL SITES AND CACHES

Maps, search, nearby places, timetables, photos and stays may be processed by external providers. GLERI may also use technical CDN caching for these responses; cache and provider retention periods still require confirmation.

Links to sellers may transmit URL parameters, the browser’s network address and set the seller’s cookies. Their policies apply after the click.

HOW TO CLEAR DATA

Clear site data in browser settings, withdraw consent in settings or delete guest trips in GLERI. Cloud trips, early-access records, sharing links and accounts are deleted through separate actions; automatic deletion periods have not yet been defined.