This Cookie Policy explains which cookies and similar technologies Flyozo (operated by MB Hotel Deals, Lithuania) uses on its website and apps, what they do, and how you can control them. It supplements our Privacy Policy.
1. What cookies and similar technologies are
Cookies are small text files placed on your device by a website. "First party" cookies are set by us; "third party" cookies are set by other companies whose tools we use. "Session" cookies expire when you close your browser; "persistent" cookies remain for a set period. We also use similar technologies: browser local storage (data stored by our site in your browser), tracking pixels in emails (a tiny image that tells us an email was opened), and mobile SDKs in our apps.
2. The categories we use
- Strictly necessary. Required for the Service to work at all: signing in, security, and payment fraud prevention. These are set without consent because the Service cannot function without them.
- Preferences and functional. Remember choices such as your language and keep your experience consistent between visits.
- Analytics and measurement. Help us understand how people find and use Flyozo. Our website traffic analytics run on our own infrastructure and are cookieless; the measurement cookie we do use (ozo_aid) links a visit to a sign-up so we know which campaign worked.
- Advertising. Used to measure our ads on third-party platforms and to reach relevant audiences. These involve sharing data with the advertising platform (currently Meta), as described in our Privacy Policy.
3. The cookies we use
| Cookie | Set by | Category | Purpose | Duration |
|---|---|---|---|---|
| better-auth.session_token (and related auth cookies) | Flyozo | Strictly necessary | Keeps you signed in and secures your session. | Up to 7 days, refreshed while you use the Service |
| __stripe_mid, __stripe_sid | Stripe | Strictly necessary | Fraud prevention and payment security on checkout pages. | 1 year / 30 minutes |
| NEXT_LOCALE | Flyozo | Preferences | Remembers your language choice. | Session |
| ozo_exp__flight_deals, ozo_exp__event_deals | Flyozo | Functional | Keeps you on the same version of our sign-up flow across visits, so pages and prices stay consistent. | 90 days |
| ozo_visitor | Flyozo | Functional | A random visitor identifier that keeps your sign-up flow assignment stable over time. | ~1 year |
| ozo_aid | Flyozo | Analytics and measurement | A random identifier that links your visit to your sign-up, so we know which campaign or page brought you to Flyozo. | 12 months |
| ozo_em | Flyozo | Advertising | Stores a hashed (SHA-256) version of your email address to improve advertising measurement matching. The raw address is never stored in the cookie. | 12 months |
| _fbp | Meta | Advertising | Browser identifier used by the Meta Pixel to measure our advertising. | 3 months |
| _fbc | Meta / Flyozo | Advertising | Stores the ad click identifier when you arrive from a Meta (Facebook or Instagram) ad, so the ad platform can attribute the visit. | 3 months |
Exact cookie names and lifetimes can change as we update the Service or as third-party tools change; we keep this table current on a best-effort basis.
4. Local storage
We use browser local storage for product state that does not need to travel with every request: your visit journey (which pages brought you here, used for the same attribution purpose as ozo_aid), interface preferences, and dismissed banners or offers. Local storage stays on your device until cleared and can be removed through your browser's site-data settings.
5. Analytics without cookies
Our website traffic statistics are collected with a self-hosted analytics tool that does not use cookies and does not share data with an outside analytics vendor. It counts visits using anonymized request data and cannot follow you across other websites.
6. How to control cookies
- Browser settings. Every major browser lets you block or delete cookies, per site or globally, and clear local storage (usually under Privacy or Site data settings). If you block strictly necessary cookies, signing in and checkout will not work.
- Advertising controls. You can control how Meta uses data about you in your Facebook or Instagram ad preferences, and use industry opt-out tools such as youronlinechoices.eu. On mobile, iOS and Android provide system-level ad tracking controls.
- Email pixels. Most email clients let you block remote images, which disables open tracking.
Where the law requires consent for non-essential cookies, we ask for it before setting them; you can withdraw consent at any time using the controls above. Our site does not currently respond to browser "Do Not Track" or Global Privacy Control signals.
7. Changes and contact
We may update this Cookie Policy as our tools change; the "Last updated" date above shows the current version. Questions? Email [email protected] or use our support page.