Cookie policy
What we store, why, and how to change your mind.
Version 2 of the purposes — last updated: 14 September 2026.
Cookies we set
One, and its only job is not to ask you again on every page. It is set whatever you answer, because it records that answer — a refusal included.
| Name | Issuer | Purpose | Retention | Consent |
|---|---|---|---|---|
consent_cookies | Farygo (1st party) | Remembers your consent decision, acceptance as well as refusal | 180 days (6 months) | Not required |
Other data stored on your device
Technically these are not cookies, but they are still writes on your device, so we declare them on the same footing.
| Name | Issuer | Purpose | Retention | Consent |
|---|---|---|---|---|
CognitoIdentityServiceProvider.* | Amazon Cognito | Session token: keeps you signed in from one visit to the next | Until sign-out or token expiry | Not required |
plausible_ignore | Farygo (1st party) | Remembers your objection to audience measurement, so it is honoured | Until you opt back in or clear your browser | Not required |
Your display preferences — language, currency — are not stored on your device: they live in your account, and you can change or delete them from your profile.
What we do not do
No advertising cookies, no third-party retargeting pixels. No browsing data is sold or shared for advertising purposes.
What you are asked
The banner appears on your first visit, before anything non-essential is stored, and asks you one thing only — the only one your answer actually changes.
- Audience measurement — loads an aggregate statistics script: page views, entry and exit pages, referrer (including the campaign that brought you here, when the link carried that marker), device type. That script sets no cookie and keeps no identifier on your device; without your agreement it is simply not loaded. No advertising profiling, no cross-site tracking.
We previously asked for separate agreement to “campaign measurement”. It was not a purpose of its own: the referrer is a field of the audience measurement above, not a separate tracker that could have been refused on its own. It has been removed from the banner, and choices recorded before that change are put to you again.
Strictly necessary cookies — the session, security, and remembering the choice above — are not put to you: the site cannot work without them, and the law requires no consent for them.
Audience measurement
Our audience measurement uses no cookie and keeps nothing that identifies you. It nonetheless starts only with your agreement, given in the banner: we ask rather than rely on the exemption this configuration would open to us.
The button below is a second switch, specific to this device: it keeps the script from loading even where consent is given, and it outlives the expiry of your choice. Nothing is asked of you on trust — the measurement simply does not start.
Giving, refusing, withdrawing
- Refusing is as easy as accepting: both are one click, side by side, in the same style. Neither is emphasised.
- Nothing is pre-ticked. No answer means refusal: browsing, scrolling or dismissing the banner never counts as agreement.
- Withdrawing is as easy as agreeing — the link below, present on every page, reopens your choices and shows them back to you as you made them. Withdrawal takes effect immediately, with no reload.
- Your refusal is kept just like your agreement, for 180 days, so you are not asked again on every page. After that, you are asked again.
We keep the date of your choice and the version of the purposes it answers: that is what lets us show what was consented to, and ask again if the purposes change.
You can also delete cookies already set from your browser's settings. Deleting the consent cookie erases your choice: the question is put to you again on your next visit.
Redirections to third parties
When you follow a link to an airline, the third-party site may set its own cookies, governed by its own policy. We have no control over them once the redirection has happened.
Mobile application
The mobile application uses no cookies but an equivalent mechanism: the authentication token, necessary to the service, kept on the device until sign-out. Nothing else is stored there — no advertising identifier, no notification identifier.
Who processes this, and your rights
The controller is CHAINIT, a SASU registered under SIRET 83154416800022. Its full details, the list of subprocessors and your rights in full are in our privacy policy. The session token listed above is issued by Amazon Cognito: it involves hosting outside the European Union, framed and described in that same policy.
For any question: privacy@farygo.com.
For cookies and writes on your device, you have the right to withdraw your consent at any time (the link above), the right to object to the audience measurement (the button above), and the rights of access, rectification and erasure described in the privacy policy.
If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr/fr/plaintes.