Cookies should come with an honest explanation.

1. About this Policy

This Cookie and Tracking Technologies Policy explains how Duolution OÜ uses cookies, local storage, software development kits, pixels, identifiers and similar technologies through Fareglitch.

It applies to the Fareglitch website and mobile application and should be read together with our Privacy Policy.

2. Cookies and similar technologies

A cookie is a small text file stored by your browser. Mobile applications often use comparable technologies rather than browser cookies, including secure local storage, app instance identifiers, SDKs, advertising identifiers and push tokens.

These technologies may keep you signed in, remember choices, protect the service, measure performance or support advertising.

3. Strictly necessary technologies

They may be used for:

• account login and authentication sessions;
• security, fraud prevention and abuse protection;
• checkout, payment authentication and booking flow;
• remembering your consent choices;
• load balancing and essential application functionality.

Blocking these technologies in your browser or device may prevent Fareglitch from working correctly.

4. Preference technologies

Preference technologies may remember choices such as:

• language and currency;
• region and departure airport selections;
• interface and accessibility settings;
• unfinished form or Journey choices;
• privacy and consent preferences.

Where a preference technology is not essential, we request consent where required by law.

5. Analytics technologies

Fareglitch may use Google Analytics 4 to understand how people use the service and where the experience needs improvement.

Analytics data may include:

• pages and application screens viewed;
• clicks, events and feature interactions;
• session duration and navigation paths;
• browser, operating system and device information;
• referral source and campaign information;
• approximate location derived from IP address;
• sign-up, checkout and booking conversion events.

Non-essential analytics technologies are activated only after consent where consent is legally required. Refusing analytics does not block the core service.

6. Advertising technologies

Fareglitch may use Google Ads technologies to measure campaign performance, attribute registrations or bookings and, where enabled, support remarketing.

Meta Pixel and Meta mobile advertising technologies are not currently active unless expressly shown in the consent settings. We may introduce them in the future and will update our configuration and disclosures where required.

Advertising technologies are optional and are used only where permitted and, when required, after consent.

7. Authentication providers

If you choose to sign in through Google, Facebook, Meta or Apple, the selected provider may use technologies necessary to complete that login request.

Authentication is separate from analytics and advertising. Choosing Google Sign-In, for example, does not by itself mean that you consent to Google Analytics or advertising cookies.

8. Payment technologies

Stripe or another payment provider may use necessary technologies for checkout, payment authentication, fraud prevention, 3D Secure and transaction security.

These technologies are normally treated as necessary when you choose to make a payment. Stripe processes information under its own privacy documentation as well as its role as our service provider.

9. Mobile application technologies

The Fareglitch mobile application may use:

• secure storage and authentication tokens;
• push-notification tokens;
• analytics or crash-reporting SDKs;
• app instance and device information;
• advertising identifiers where consented to;
• local application storage for settings and drafts.

Browser cookie settings do not necessarily control technologies inside a mobile app. Relevant controls may also be available in Fareglitch settings, iOS or Android settings, advertising privacy controls and notification settings.

10. Your consent choices

Where required, our consent interface offers categories such as:

• Necessary — always active;
• Preferences — optional;
• Analytics — optional;
• Advertising — optional.

You may accept all, reject non-essential technologies or choose categories individually.

You may also use browser or device controls. Blocking all storage may prevent login, checkout and other essential features from functioning.

11. How long data is kept

Exact durations may vary by technology and may be shown in the consent interface.

12. Third-party providers

Depending on enabled features, providers may include:

• Google Analytics, Google Ads and Google authentication;
• Stripe for payments and fraud prevention;
• Apple, Facebook or Meta for optional authentication;
• Meta advertising technologies if introduced in the future;
• Cloudflare or infrastructure providers for security and delivery;
• support or error-monitoring providers if introduced.

Third parties may process information under their own privacy policies when acting independently.

13. International transfers

Some providers may process information outside Estonia or the European Economic Area. Where required, we use an appropriate transfer mechanism such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.

More information is available in our Privacy Policy.

14. Changes to this Policy

We may update this Policy when technologies, providers, legal requirements or Fareglitch features change. We will publish the updated version and change the date shown at the top of this page.

Where required, we will ask for fresh consent before activating a materially different optional use.

15. Contact us