Cookie Policy

This Cookie Policy explains what cookies are, the cookies TravelFare.PK sets, and how you can control them. It complements our Privacy Policy.

1. What are cookies?

Cookies are small text files that websites place on your device to remember preferences, keep you signed in, and measure how the site is used. We also use comparable browser storage (localStorage, sessionStorage) and pixel tags for similar purposes; we treat all of these the same way as cookies for the rest of this policy.

2. Categories of cookies we use

Strictly-necessary

Required for the site to function — you cannot disable these without breaking core features.

• tf_session — keeps you signed in to the CMS during an editing session. Expires when the browser closes.
• tf_access_token / tf_refresh_token / tf_profile — Nhost authentication tokens for CMS users. HTTP-only.
• tf_consent— remembers your cookie preferences so we don't prompt you again. Lifetime: 12 months.
• cf_clearance / cf_chl_* — Cloudflare bot-protection cookies served on inquiry forms.

Analytics

Helps us measure traffic patterns and improve the site. Anonymised — we never link analytics events to your identity without consent.

• _ga / _ga_* — Google Analytics (only set if you accept analytics cookies). Lifetime: 13 months.
• tf_event — first-party event ID for our own server-side analytics. Lifetime: session.

Marketing

Used to measure ad-campaign effectiveness and (if you opt in) personalise the ads you see on third-party sites.

• _fbp / fr — Meta Pixel. Set only with marketing consent. Lifetime: 90 days.
• _gcl_* — Google Ads conversion tracking. Set only with marketing consent. Lifetime: 90 days.

3. Your choices

• Cookie banner. The first time you visit travelfare.pk we surface a consent banner letting you accept or decline non-essential categories. Your choice is stored in tf_consent and respected on every subsequent visit.
• Browser controls.Most browsers let you block all cookies, block third-party cookies, or delete cookies on close. See your browser's privacy settings.
• Do Not Track. We honour the DNT header by treating it as a decline of analytics + marketing categories.
• Opt-out tools. Google Analytics opt-out · Meta ads preferences

4. Cookies set by third parties

Some pages embed third-party content that may set its own cookies:

• YouTube on package detail pages (when you press play).
• Google Maps on the contact page (always loaded for the office map).
• Cloudflare Turnstile on inquiry forms (anti-spam).

We don't control these cookies — they're governed by the third party's own privacy policy.

5. Updates

We'll update this list whenever the cookies we use change. The "Last updated" date at the top reflects the latest revision. Material changes will trigger the consent banner to re-appear so you can re-confirm preferences.

6. Contact

Questions about cookies or how to revoke consent? Email privacy@travelfare.pk.