Last updated: 15 May 2026 (added PostHog EU behavioural analytics + session replay under the existing analytics opt-in). This policy explains how Paglipat (operated by Vectencia Ltd, a company registered in England & Wales, Co. No. 16930574) uses cookies and similar technologies on www.paglipat.com.
Your choice - three categories
On your first visit we show a consent banner with three categories. You can change your choice any time via the Cookie settings link in the site footer.
- Strictly necessary - always on. Cloudflare bot mitigation (
__cf_bm), the consent record itself (pg_cookie_consent), and what the embedded flight + hotel search widgets need to function once you actively use them. Without these the site cannot work. - Functional - off by default. Remember your preferred currency and language between visits (
tpwl_locale,tpwl_currency) so the search widget loads with your settings. - Analytics - off by default. Google Analytics 4 (with IP anonymisation) and PostHog EU (anonymous events plus session replay with keyboard input automatically masked). We only load the analytics scripts if you have given consent - otherwise no analytics request is made at all.
What is a cookie?
A cookie is a small text file a website stores on your device. We use them to remember your preferences, keep core features working, and (only if you opt in) count anonymous page views.
We also use localStorage (a similar browser-storage mechanism) for non-tracking purposes such as remembering whether you accepted this banner.
Cookies we set directly
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
pg_cookie_consent (localStorage) | Stores your consent choice (which categories you allowed) so we don't show the banner again. | Strictly necessary | Until you clear it or change your choice |
pg_locale_set | Remembers we already redirected you once based on your language preference, so we don't redirect you again on every visit. | Functional | 1 year |
tpwl_locale · tpwl_currency | Tells the TravelPayouts flight-search widget which language and currency to render in. | Functional | 1 year |
Third-party cookies
Google Analytics 4
We use Google Analytics to understand which pages get traffic and which don't, anonymously and in aggregate. GA4 sets cookies like _ga, _ga_<ID>, and _gid. We have IP anonymisation enabled.
Opt out: install the Google Analytics Opt-out Browser Add-on or block analytics cookies in your browser.
PostHog (EU region)
We use PostHog (hosted in the EU - Frankfurt, by PostHog Inc.) to see which features users actually reach and where they drop off in the search-to-booking funnel. PostHog stores a pseudonymous distinct_id in localStorage (ph_<project>_posthog) and may set a ph_current_project_token cookie. We do not link this ID to any account because the site has no accounts.
Session replay: PostHog also records a video-like reconstruction of your visit (mouse movement, scrolls, clicks). All keyboard input is automatically masked at the SDK level before it leaves your browser - we never see what you type in search boxes, the newsletter email field, or the currency picker. Replays are retained for 30 days then deleted.
Opt out: reject analytics in the cookie banner, or use the Cookie settings link in the footer to withdraw consent. PostHog also respects the Global Privacy Control signal. See PostHog's privacy policy.
TravelPayouts (flight search)
The flight search box on our home and flight search pages is provided by TravelPayouts. When loaded it sets cookies that store your search preferences and enable the booking redirect to the partner you choose. See TravelPayouts' privacy policy.
Stay22 (hotel search)
The hotel search box on our hotels page is provided by Stay22. Stay22 may set cookies for session management, currency display, and conversion tracking. See Stay22's privacy policy.
Cloudflare
Our infrastructure provider sets a __cf_bm cookie on every request to detect bots and protect the site. This cookie is strictly necessary and cannot be disabled if you want to use the site.
YouTube (video embeds)
Video embeds in our blog posts use youtube-nocookie.com by default - no YouTube cookies are set unless you click play on a video.
Yesim (eSIM)
Our /esim page lists plans from Yesim (operated by Genesis Group AG, Zug, Switzerland). The plan list is fetched at build time so no Yesim cookie is set while you browse our site. When you click "Buy" you are redirected to yesim.app where Yesim sets its own cookies for your booking session. See Yesim's privacy policy.
Affiliate links
Some links on this site (notably to TravelPayouts and Stay22 partners) are affiliate links. When you click one, the partner may set its own tracking cookie so that any booking you make can be attributed to us. We earn a commission at no extra cost to you. Read the full affiliate disclosure.
How to manage cookies
- Change your choice on Paglipat: click Cookie settings at the bottom of any page to reopen the consent panel and update your categories.
- Block all cookies: use your browser settings (Chrome, Firefox, Safari, Edge all have a "block third-party cookies" or stricter option).
- Clear cookies: any browser's "clear browsing data" panel - note this also clears
pg_cookie_consent, so the banner will reappear on your next visit. - Browser-level opt-out: enable Do Not Track / Global Privacy Control in your browser; we honour it where applicable.
Blocking cookies will not break the site, but the flight/hotel widgets may forget your preferences between visits.
Updates to this policy
We may update this policy when we add new tools or when the law changes. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged on the site.
Contact
Questions? [email protected].
Vectencia Ltd, 3rd Floor, 86-90 Paul St, London, EC2A 4NE, United Kingdom.
