Cookies and similar technologies

This policy describes the cookies and similar technologies used by Iceland Atlas, including localStorage, IndexedDB and Cache Storage. For more general information about personal data processing, read the Privacy Policy. Our privacy contact is support@geticelandatlas.com.

Cookies are small text files saved by your browser. Technologies such as localStorage, IndexedDB and Cache Storage similarly allow identifiers, preferences, sessions or content to be stored on your device. Some technologies are set directly by Iceland Atlas; others are controlled by the providers listed below.

Name or technology	Category and purpose	Duration
iceland_atlas_locale	Preferences: remembers your language and redirects you to the appropriate version of the site.	365 days
Firebase Auth (firebaseLocalStorageDb in IndexedDB)	Essential: keeps the account session and authentication tokens on the device.	Until sign-out, expiry or deletion of site data
localStorage iceland-atlas:itinerary-wizard:v1*	Functional: saves itinerary creation drafts and state, including for authenticated users.	Until completion, deletion of the draft or deletion of site data
localStorage iceland-atlas:offline-itinerary:v1:* and PWA Cache Storage	Functional: makes itineraries and app resources available offline.	Until the itinerary is removed, the cache is updated or site data is deleted
localStorage iceland-atlas:pending-itinerary-jobs:v1, iceland-atlas:pending-itinerary-concept-jobs:v1, iceland-atlas:custom-itinerary-presented:* and ia:home-dashboard	Functional: retains processing state, previously displayed notices and interface preferences.	Until the feature completes, the app removes the data or site data is deleted
localStorage iceland-atlas:ga4-purchase:*	Measurement: prevents the same purchase from being recorded more than once in Google Analytics.	Until site data is deleted
localStorage iceland-atlas:meta-external-id	Marketing and measurement: pseudonymous browser identifier used to link and deduplicate Meta Pixel and Conversions API events.	Until site data is deleted

Names ending in * represent a family of keys containing, for example, an itinerary, user or transaction identifier.

When measurement is enabled, Firebase Analytics loads Google Analytics 4 to understand use of the site and improve the product and content. Data may include pages viewed, searches and filters, selected content, tool usage, paywall views and checkout/purchase steps, together with technical information, approximate geographical area, and browser and device information. For authenticated users, the Firebase account ID and general properties such as plan and role may be associated with events.

Cookie	Purpose	Default duration
_ga	Distinguishes browsers/users for measurement.	2 years, subject to browser limits
_ga_<ID>	Persists session state for the GA4 property.	2 years, subject to browser limits

Provider: Google Ireland Limited / Google LLC. Learn more in the GA4 cookie documentation and Google Privacy Policy.

Iceland Atlas uses Meta Pixel in the browser and Meta Conversions API on the server to measure visits, content views, searches, registrations and checkout or purchase steps, attribute conversions and evaluate campaigns. Events may include the page URL and title, content or plan identifiers, purchase value and currency, IP address, user-agent, _fbp, the optional _fbc, and the local pseudonymous identifier. For an authenticated user or a user involved in checkout, an email address or phone number may be sent to Meta after normalisation and hashing; the Pixel may also use the verified phone number for advanced matching.

Cookie	Purpose	Duration
_fbp	Identifies the browser for advertising, attribution and measurement.	90 days, renewed when used
_fbc	Stores the identifier of a Meta ad click when the URL contains a valid fbclid.	90 days, renewed when used

Provider: Meta Platforms Ireland Limited / Meta Platforms, Inc. Learn more in the Meta Cookies Policy and Meta Privacy Policy.

• Firebase App Check and Google reCAPTCHA v3 are used in sensitive areas, OTP sign-in and account recovery to verify that requests come from legitimate people and applications, prevent abuse and protect APIs. Google may use its own cookies and storage, with durations determined by the service and browser settings. See the Firebase App Check documentation and Google Privacy Policy.
• Stripe Checkout opens on Stripe's domain when you choose to purchase a plan. Stripe may set cookies required to process the payment, prevent fraud, authenticate the session and provide features such as Link. Stripe controls these cookies and their durations are described in its Cookie Policy and Privacy Policy.

You can block or delete cookies, site data, IndexedDB and caches in your browser settings. Deleting Iceland Atlas data may sign you out, reset the language, remove drafts or offline content, and prevent login or protected features from working correctly. Blocking analytics or marketing technologies affects measurement and attribution, but should not prevent access to public content.

You can also install the Google Analytics Opt-out Browser Add-on and manage advertising preferences through Meta's tools. Choices made directly with Google, Meta or Stripe depend on the relevant account and provider.

We may update this policy when features or providers change. The date shown above indicates the latest revision. Actual durations may be shortened by browser settings, private browsing or manual deletion of data.