Cookie Policy
Last updated: January 5, 2025
This Cookie Policy explains how Wurora uses cookies and similar tracking technologies in compliance with EU ePrivacy Directive and GDPR.
Quick Navigation
2. Why We Use Cookies
Wurora uses cookies for the following purposes:
✓ Essential Functionality
To enable core features like user authentication, security, and consent management. These cookies are strictly necessary for the website to function.
✓ Personalization
To remember your preferences, such as selected cities, saved places, and language settings (requires consent).
✓ Performance & Analytics
To understand how users interact with Wurora, identify issues, and improve the user experience (requires consent).
✓ Affiliate Revenue
To track bookings made through partner services (GetYourGuide, Expedia) so we can earn commissions and keep Wurora free (requires consent).
3. Essential Cookies (Always Active)
These cookies are strictly necessary for Wurora to function. They cannot be disabled as the website would not work without them.
⚠️ Exempt from Consent: Under ePrivacy Directive Article 5(3), essential cookies do not require prior consent as they are necessary to deliver the service explicitly requested by you.
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| next-auth.session-token | Stores your login session after authentication | HTTP-only, Secure | 30 days |
| next-auth.csrf-token | Prevents Cross-Site Request Forgery (CSRF) attacks | HTTP-only, Secure | Session |
| next-auth.callback-url | Remembers where to redirect after OAuth login | Secure | Session |
| wurora_consent_preferences | Stores your cookie consent choices | Secure, SameSite=Lax | 365 days |
4. Functional Cookies (Optional)
These cookies enable enhanced functionality and personalization. If you reject them, some features may not work as intended.
✓ Requires Consent: These cookies are loaded only if you accept "Functional Cookies" in your cookie preferences.
| Storage Item | Purpose | Type | Duration |
|---|---|---|---|
| selectedCity | Remembers your last selected city (e.g., Barcelona) | localStorage | Indefinite |
| cityHistory | Stores your browsing history of cities | localStorage | Indefinite |
| theme_preference | Stores your theme preference (light/dark) | localStorage | Indefinite |
ℹ️ What Happens If You Reject: You'll need to re-select your city each time you visit, and your saved preferences won't be remembered.
5. Analytics Cookies (Optional)
These cookies help us understand how users interact with Wurora. All data is anonymous and hashed.
✓ Requires Consent: These cookies are loaded only if you accept "Analytics Cookies" in your cookie preferences.
| Storage Item | Purpose | Type | Duration |
|---|---|---|---|
| wurora_anon_id | Anonymous user identifier for tracking (randomly generated) | localStorage | Indefinite |
| wurora_session_id | Session identifier for tracking page views | sessionStorage | Session |
| wurora_tracking_opt_out | Flag indicating analytics opt-out (set when you reject analytics) | localStorage | Indefinite |
What We Track (if consented):
- Pages visited and time spent on each page
- Click events and user interactions
- Device type, browser, operating system
- Screen resolution and viewport size
- Referrer URL (where you came from)
What We Do NOT Track:
- Personally identifiable information (PII)
- Form inputs or passwords
- Cross-site tracking or retargeting
🔒 Privacy-First Analytics: All IP addresses are hashed with SHA-256 + salt. Analytics data is stored for a maximum of 90 days and then automatically deleted.
6. Affiliate Tracking Cookies (Optional)
These third-party cookies are set by our booking partners to track bookings and attribute commissions. This is how we earn revenue to keep Wurora free.
✓ Requires Consent: These cookies are loaded only if you accept "Affiliate Cookies" in your cookie preferences. No cookies = no tracking = no commission for us.
🎫 GetYourGuide Cookies
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| gyg_cmp | Tracks campaign source (Partner ID: 9RM1C7C) | 3rd party | 30 days |
| gyg_partner_id | Stores Wurora's GetYourGuide partner ID | 3rd party | 30 days |
| gyg_session | Session tracking for booking attribution | 3rd party | Session |
Privacy Policy: GetYourGuide Privacy Policy
🏨 Expedia Cookies
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| _expedia_affiliate | Tracks affiliate referrals from Wurora | 3rd party | 30 days |
| _expedia_tracking | Session tracking for booking attribution | 3rd party | Session |
Privacy Policy: Expedia Privacy Policy
💰 Revenue Transparency: We earn 8-15% commission from GetYourGuide and 4-6% from Expedia bookings. This does NOT increase your cost - prices are the same whether you book through Wurora or directly.
7. Advertising Cookies (Not Currently Used)
Wurora does not currently use advertising or retargeting cookies. This category exists for future use if we decide to display ads or run marketing campaigns.
ℹ️ Future Use: If we introduce advertising cookies in the future, we will update this Cookie Policy and require your renewed consent. You will be notified via email if you have an account.
8. How to Manage Cookies
You have full control over which cookies Wurora uses (except essential cookies).
✓ Through Wurora's Cookie Preferences
The easiest way to manage cookies is through our built-in cookie preference manager:
You can accept all, reject all, or customize your preferences by category. Your choices are saved for 1 year.
✓ Through Your Browser Settings
Most browsers allow you to control cookies through their settings:
Microsoft Edge
Settings → Cookies and site permissions → Manage and delete cookies
Edge Cookie Settings →⚠️ Warning: Blocking all cookies (including essential ones) will prevent you from logging in or using certain features of Wurora.
9. Third-Party Cookie Policies
When you interact with third-party services through Wurora, they may set their own cookies. We do not control these cookies.
GetYourGuide
Tour and activity booking partner. Cookies require your consent (affiliate category).
GetYourGuide Privacy Policy →Expedia
Hotel and travel booking partner. Cookies require your consent (affiliate category).
Expedia Privacy Policy →Google OAuth
Used only when you choose to sign in with Google. Cookies set by Google during OAuth flow.
Google Privacy Policy →GitHub OAuth
Used only when you choose to sign in with GitHub. Cookies set by GitHub during OAuth flow.
GitHub Privacy Statement →10. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. When we do:
- We will update the "Last updated" date at the top
- For significant changes, we will notify you via email and/or a prominent notice on Wurora
- We may require renewed consent if new cookie categories are introduced
Questions About Cookies?
If you have questions about our use of cookies, please contact us:
Email: privacy@wurora.com
Data Protection Officer: dpo@wurora.com
Related Documents: