At a glance
This document forms part of the agreement between you and Zeptotravel LLC (“Zeptotravel”, “we”, “us”). It applies to every booking made through this website or through our telephone reservations desk.
Effective date: 28 August 2026 · Governing law: State of Delaware, USA · Questions: legal@zeptotravel.com
1. What cookies are
A cookie is a small text file that a website asks your browser to store and hand back on later visits. Cookies set by the site you are on are called first-party cookies; cookies set by another domain whose code is embedded in the page are third-party cookies. Some expire when you close the browser (session cookies) and some persist for a set period (persistent cookies). This policy also covers technologies that behave like cookies: local storage and session storage entries, tracking pixels and clear GIFs, and software development kits embedded in third-party scripts. We use the word “cookies” throughout to cover all of them.
2. Why we use them
Four honest reasons. To make the booking flow work — remembering the search you just typed, keeping a quote attached to your session, and protecting the site against automated abuse. To remember choices — your consent preferences, your currency and display settings, and whether you have dismissed a notice. To measure — understanding which pages get read, where people abandon a search, and which errors are happening. And to advertise — measuring whether an advertisement led to a booking and, where you have allowed it, showing you relevant advertising on other sites.
Only the first of those is strictly necessary. The other three run only with your consent, and you can change that consent at any time.
3. The four categories
3.1 Strictly necessary
Required for the site to function and for security. They handle load balancing, session continuity, form submission integrity, bot and fraud detection, and the storage of your cookie choices themselves. These cannot be switched off through our banner because the site would not work without them; you can still block them in your browser, but the booking forms will fail.
3.2 Functional
Remember preferences that improve the experience but are not essential: recent searches, preferred vertical tab, currency and units, accessibility settings such as reduced motion, and whether you have seen a particular notice. Turning these off is harmless; you will simply re-enter things.
3.3 Analytics and performance
Tell us, in aggregate, how the site is used: page views, journey paths, search-to-quote conversion, page load speed, and JavaScript errors. We configure analytics with IP truncation where the provider supports it and we do not use analytics data to identify individuals. This is the category that lets us find out that, for example, a car rental form is failing on a particular browser.
3.4 Advertising and targeting
Set by us and by advertising partners to measure campaign performance, to limit how often you see the same advertisement, and to show advertising relevant to travel you have looked at. This is the category that involves “sharing” personal information for cross-context behavioural advertising under California law. Declining it does not reduce the number of advertisements you see; it makes them less relevant and stops the data flow.
4. Cookies we typically set
Cookie names and lifetimes change as vendors update their products, so the table below describes the cookies by function rather than pretending to a fixed list of vendor identifiers. Your browser’s developer tools will always show you the exact set in force on a given day, and our preference centre lists them live.
| Category | What the cookie does | Party | Typical duration |
|---|---|---|---|
| Strictly necessary | Maintains your browsing session and keeps a search or quote attached to it | First party | Session |
| Strictly necessary | Stores your cookie consent choices so we do not ask again on every page | First party | 12 months |
| Strictly necessary | Cross-site request forgery token protecting form submissions | First party | Session |
| Strictly necessary | Bot detection and rate limiting at the network edge | Third party (security provider) | Session to 30 days |
| Strictly necessary | Load balancing — keeps you on the same server during a booking | First party | Session |
| Functional | Remembers recent searches and your preferred vertical tab | First party | 30 days |
| Functional | Remembers display preferences such as currency, units and reduced motion | First party | 6 to 12 months |
| Functional | Records that you dismissed a banner or notice | First party | 6 months |
| Analytics | Distinguishes unique visitors and sessions for aggregate reporting | Third party (analytics provider) | Up to 13 months |
| Analytics | Throttles the rate of requests sent to the analytics service | Third party | 1 minute to 24 hours |
| Analytics | Captures page performance timings and JavaScript errors | First or third party | Session to 12 months |
| Advertising | Attributes a booking to the advertisement or campaign that preceded it | Third party (ad platform) | 30 to 90 days |
| Advertising | Frequency capping — limits repeat display of the same creative | Third party | 30 days |
| Advertising | Builds an interest segment used to show travel advertising on other sites | Third party | Up to 13 months |
5. Third-party cookies
Where a third party sets a cookie through our site, that party is also handling your data for its own purposes and under its own privacy policy. We keep the number of such parties deliberately small, we require contractual restrictions on the use of the data, and we list the current set in the preference centre with a link to each provider’s policy. We do not embed social media widgets, comment systems or third-party chat tools that would set additional cookies without a purpose we can justify.
6. Managing cookies on our site
The first time you visit, a banner asks for your choice on functional, analytics and advertising cookies. Nothing in those three categories is set before you choose. You can reopen the preference centre at any time from the “Cookie preferences” link in the site footer, change any category, and the change takes effect immediately — existing non-essential cookies in a category you switch off are cleared on your next page load. Your choice is stored per browser and per device, so you will need to set it again on a different browser or after clearing your cookies.
7. Controlling cookies in your browser
Every major browser lets you block or delete cookies independently of any website’s banner. The menus move between versions, so the paths below are indicative; search your browser’s help for “cookies” if the wording differs.
- Google Chrome — Settings, then Privacy and security, then Third-party cookies and Delete browsing data.
- Apple Safari (macOS) — Safari menu, then Settings, then Privacy, where you can prevent cross-site tracking and manage website data. On iOS and iPadOS: Settings, then Apps, then Safari.
- Mozilla Firefox — Settings, then Privacy & Security, where Enhanced Tracking Protection and Cookies and Site Data live.
- Microsoft Edge — Settings, then Cookies and site permissions, and Privacy, search, and services for tracking prevention.
- Mobile browsers generally — look under Settings, then Privacy. On iOS and Android you can also reset or limit the advertising identifier at operating-system level, which affects in-app advertising as well as the web.
Blocking all cookies, including strictly necessary ones, will stop our search and booking forms from working. If that happens, call +1-888-555-0119 and an advisor will complete the booking for you.
8. Global Privacy Control
We honour the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as a valid request to opt out of the sale and sharing of personal information and of targeted advertising, and we apply it automatically to that browser without asking you to fill in anything. The signal is applied at the browser level, so it does not travel with you to a different device, and because it is not tied to an identified person it cannot by itself be applied to bookings you made previously. If you want the opt-out linked to your customer record as well, email privacy@zeptotravel.com and we will apply it to the account.
9. Cookies and the do-not-sell right
Under the California Privacy Rights Act, allowing an advertising cookie that passes identifiers to an ad platform for cross-context behavioural advertising counts as “sharing”, even though no money changes hands. Switching off the Advertising category in our preference centre, or sending GPC, is therefore the same thing as exercising your right to opt out of sharing for the browser you are using. The dedicated page — Do Not Sell or Share My Personal Information — explains the right in full and gives you an account-level route as well as the browser-level one. We do not sell personal information for monetary consideration, and we do not sell or share the personal information of consumers we know to be under 16.
10. What happens if you refuse
Refusing functional, analytics and advertising cookies has no effect on your ability to search, get a quote, book, or on the price you are quoted. We do not price differently based on cookie consent, and we do not degrade service for people who decline. The practical effects are: we lose visibility of which pages are useful, so the site improves more slowly; advertising you see elsewhere becomes less relevant; and you will re-enter preferences that we would otherwise have remembered.
11. Updates and contact
We review this policy whenever we add or remove a tag on the site, and at least annually. The effective date at the top reflects the current version. Questions about cookies, or a request for the live list of cookies in use, go to privacy@zeptotravel.com. See also our Privacy Policy for the full picture of what we collect and why.