Skip to content
Back to Home

Cookie and Storage Policy

Last updated: October 8, 2026

1. Introduction

This Cookie Policy explains how Strait Passage ("we," "our," or "us") uses cookies and similar tracking technologies when you visit our website and use our services. This policy should be read alongside our Privacy Policy, which provides more information about how we handle your personal data.

Using the website does not grant permission for optional journey analytics. You can allow or decline it using the analytics preferences controls.

2. What Are Cookies?

Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners useful information about how their site is being used.

Cookies can be "persistent" (remaining on your device until they expire or you delete them) or "session" cookies (normally kept for a browser session; session restoration may retain them). They can be set by the website you're visiting ("first-party cookies") or by third parties ("third-party cookies").

This policy also covers browser local storage and session storage, which function similarly to cookies. References to "cookies" in this policy include these similar technologies.

3. Browser Storage We Use

Local storage persists across visits. Session storage belongs to a browser-tab session; browser session restoration can retain it. Our application uses the records below rather than booking-session, CSRF, route-preference or advertising cookies.

Blocking storage can prevent journey recovery or admin sign-in. A booking draft can still work in memory while the page stays open. Customer-portal tokens are held in page memory, rather than saved in these records.

First-party browser storage
NameLocationPurposeLifetime and clearing
strait-passage-bookingLocal storageSafe trip inputs and selection IDs for journey recovery. Passenger documents, contact details and payment credentials are excluded.No automatic expiry. Updated when you edit or reset a trip; clearing site data removes it. Resetting leaves an empty draft.
adminToken; strait-passage-authLocal storageAdministrator sign-in token and account state, used in the admin area.Until sign-out or site-data removal. An empty sign-in record may remain after sign-out. New tokens are valid for 24 hours; previously issued seven-day tokens expire naturally. Token expiry does not itself erase browser storage.
sp.analytics-consent.v1Session storageYour allow or decline choice for optional journey analytics in this tab.For this browser-tab session. It is not an account-wide or cross-tab preference.
sp.ai-measurement.v1Session storage, after opt-inRandom measurement identifier and first-touch discovery, AI-referral or partner categories.Fixed 30-minute attribution window. An expired entry can remain until the next measurement action, withdrawal or end of the browser session.
sp.ai-measurement.history.v1Session storage, after opt-inIdentifiers needed to delete measurement associated with this tab when you withdraw.Until withdrawal is acknowledged or the browser-tab session ends.
sp.ai-measurement.revoke.v1Session storage, when withdrawal needs retryPending deletion identifiers so withdrawal can retry after a connection failure.Until the server acknowledges deletion or the browser-tab session ends.

Optional Journey Analytics

Using the site does not grant permission. When collection is enabled, it starts only after you choose “Allow journey analytics.” Declining does not prevent booking. Discovery, identifiable AI referrals, accepted assistance, verified payments and supplier-confirmed journeys are measured separately.

These records are pseudonymous, rather than anonymous. Measurement excludes traveler names, contact details, passport details, flight identifiers, form contents and payment credentials. A random identifier and first-touch categories use a fixed 30-minute attribution window. The server excludes expired records from reporting after 30 days; scheduled maintenance deletes them and linked events in bounded batches.

Withdrawal stops new association immediately and requests deletion of linked measurement. If offline, this tab retains deletion handles and retries after reconnect or refresh. Closing the tab or unavailable storage can prevent retry. There is no account-wide or cross-tab preference guarantee. Operational bookings and partner referrals are separate from optional measurement.

4. Payment, Security and Error Monitoring Providers

Provider storage depends on the provider, browser and configuration. We do not assign invented cookie names or fixed lifetimes to it.

  • PayPal provides payment processing and fraud protection and may use cookies or similar storage when its payment interface loads. See PayPal’s cookie statement and privacy statement.
  • Cloudflare Turnstile verifies security challenges. Its optional pre-clearance feature can set a clearance cookie when enabled by provider configuration; this policy does not claim that feature is enabled. See Cloudflare’s pre-clearance documentation.
  • When configured, Sentry collects error diagnostics and sampled performance information. The application also configures replay capture on errors, with text masking and media blocking; its SDK can keep session or replay identifiers. This is separate from the journey-analytics choice. See Sentry’s privacy notice.

The current application does not install Google Analytics, Google Ads or Meta advertising pixels. Search Console verification and sitemap submission do not add those trackers to the site.

5. Your Cookie Choices

5.1 Cookie Consent

When journey analytics is enabled, the initial prompt asks you to allow or decline before continuing on public pages. The controls above the footer and below this policy let you change or withdraw permission. Neither choice prevents booking. Analytics remains off without an explicit choice. Other essential booking and payment functions continue independently.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

  • See what cookies are stored and delete them individually
  • Block third-party cookies
  • Block all cookies
  • Delete all cookies when you close your browser

Blocking provider cookies may affect payment or security challenges. Clearing site data also removes saved trip and admin sign-in state and can discard pending analytics-withdrawal retries. Withdraw first and allow deletion to complete if you want linked server measurement removed.

5.3 Browser-Specific Instructions

For information on how to manage cookies in your specific browser:

5.4 Mobile Devices

On mobile devices, you can manage cookies and tracking through your device settings. Both iOS and Android provide options to limit ad tracking and clear cookies from browsers.

6. Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. There is currently no industry standard for how websites should respond to these signals. We currently do not respond to Do Not Track signals, but you can control tracking through our cookie consent preferences and browser settings.

7. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. When we make significant changes, we will update the "Last updated" date at the top of this policy and may notify you through our website.

We recommend reviewing this policy periodically to stay informed about how we use cookies.

8. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Strait Passage

Email: privacy@straitpassage.com

General Inquiries: hello@straitpassage.com

Phone: (305) 339-4339

Related Policies

Optional journey analytics

With your permission, we measure discovery pages, recognizable AI referrals, accepted assistance requests, payments and operator-confirmed journeys. Traveler details and payment credentials are excluded. Your choice applies to this browser tab.

You can book with either choice and withdraw permission here at any time. Read how analytics works.