Choose which cookies stay, which ones go.
Four categories, granular control. Essential cookies are always on — without them the booking engine cannot issue a ticket. Everything else is a choice you make, change any time you like. Your preferences save to this browser and travel across every Istanbul Tourist Information domain.
Always on Strictement nécessaires — the booking engine won't run without these 3 cookies
These keep the session alive, remember your group size between pages, and let us verify a payment at checkout. They don't track you, aren't read by advertisers, and carry no identifier beyond a session ID. Turning them off would mean the site literally can't complete a booking — which is why the toggle is locked.
| Name | Domain | Purpose | Expires |
|---|---|---|---|
| _iti_session | .istanbul-tourist-information.com | Session ID for cart + checkout | On close |
| _iti_csrf | .istanbul-tourist-information.com | Form protection against CSRF | Session |
| _iti_consent | .istanbul-tourist-information.com | Remembers this preference panel | 12 months |
Optional Fonctionnels — remembers your language, preferred guide language, currency 3 cookies
These make the site feel like it remembers you: interface language, currency, the guide language you last selected for a tour. Used only to personalise your visit — never read by advertisers. If off, the site still works but defaults (English, EUR, English guide) apply every page load.
| Name | Domain | Purpose | Expires |
|---|---|---|---|
| _iti_locale | .istanbul-tourist-information.com | Interface language | 12 months |
| _iti_ccy | .istanbul-tourist-information.com | Last-used currency | 12 months |
| _iti_guide_lang | .istanbul-tourist-information.com | Preferred guide language | 12 months |
Optional Analyses — anonymous usage statistics 4 cookies
Google Analytics 4 with IP anonymisation, ad-signals disabled, demographics off. We see how many people arrive, which page they land on, where they drop off — not who they are or what else they look at on the web. We use this to decide what to fix next, nothing else.
| Name | Provider | Purpose | Expires |
|---|---|---|---|
| _ga | Google Analytics 4 | Unique anonymous visitor ID | 24 months |
| _ga_* | Google Analytics 4 | Session state | 24 months |
| _ga_gid | Google Analytics 4 | Short-lived session ID | 24 hours |
| _sentry | Sentry.io | Crash fingerprint — no PII | 14 days |
Optional Marketing — retargeting and campaign attribution 3 cookies
If on, we tell Meta and Google Ads that you visited us. They use that to re-show our palace tours to you and to measure which ads worked. Désactivés par défaut — we treat marketing cookies as opt-in, not opt-out, regardless of your country's legal minimum.
| Name | Provider | Purpose | Expires |
|---|---|---|---|
| _fbp | Meta Pixel | Retargeting + attribution | 90 days |
| _gcl_au | Google Ads | Conversion attribution | 90 days |
| _iti_utm | Istanbul Tourist Information | UTM source + campaign last-touch | 30 days |
What happens to the data behind each cookie you allow.
Every category you enable triggers a specific data flow. Here's the chain from the moment a cookie is set to the moment its data is used — or deleted.
Cookie is set on the Istanbul Tourist Information domain when you consent. Lives in your browser's storage, not on our server.
Sent back to us on each request. Used to identify the session or preference — nothing else.
Analytics feed into GA4 anonymised. Marketing feeds into Meta / Google Ads as opaque IDs.
At expiry or when you revoke consent here, the cookie is deleted. Downstream data purged per vendors' retention windows.
