Cookie policy
What we store on your device on operator.portivo.eu, in charter companies' booking shops and in the Portivo dashboard, why and for how long.
In short
- operator.portivo.eu
- No cookies and no advertising tools.
- Shops and dashboard
- Analytics and marketing only after consent; they are off by default.
- Changing your mind
- The "Cookie settings" link in the shop's and the dashboard's footer.
The summary makes the document easier to read and does not replace its full text.
01What cookies are
Cookies are small text files a site stores on your device. Browser storage (localStorage and sessionStorage) works in a similar way. This policy describes both in three services: on operator.portivo.eu, in charter companies' booking shops and in the Portivo dashboard.
02Three categories
Essential cookies keep you signed in, keep a booking you started, remember your language and currency and your choice about consent. They need no consent, because the service does not work without them.
Analytics cookies show us how you use the service and help us find errors. They switch on only after you consent.
Marketing cookies measure how well ads work. They switch on only after you consent and only in the shops; advertising tools load where the charter company has added them.
03operator.portivo.eu
operator.portivo.eu stores no cookies and uses no advertising tools. Its visit statistics and performance measurement run without cookies and without storing anything on your device (below). Only one entry stays on your device, in browser storage:
| Entry | Purpose | Duration |
|---|---|---|
| pv-gpu (browser storage) | remembers whether the browser can play the page's animated background smoothly, so it is not tested on every visit; it is tied to the browser version, not to you | until the site's data is cleared; tested and stored again after a browser update |
Performance measurement. Once the page has loaded we measure how fast it appeared and how it responds (the Core Web Vitals). The measurement stores nothing on your device, uses a random identifier that disappears when you close the page, and goes to PostHog (EU cloud) through our own /ingest address. When the browser sends a Global Privacy Control or Do Not Track signal, the measurement does not run.
Visit statistics. We count visits, the pages viewed and the clicks on them with PostHog (EU cloud) in its cookieless mode: nothing is stored on your device, PostHog tells visits apart by a one-way hash of the IP address and the browser that it computes on its servers with a key it replaces every day, and it builds no profile of you. The data goes through our own /ingest address. When the browser sends a Global Privacy Control or Do Not Track signal, the statistics do not run.
04Booking shops
A booking shop is run by a charter company (the operator). It is responsible for the booking, for the cookies the shop needs to work and for any advertising tools it adds. Portivo Inc. is responsible, as controller, for visit statistics (PostHog) and error reports (Sentry) in the shops: we decide what these tools collect, use the data to develop and fix the software, and show the operator only aggregate statistics of its shop. Portivo supplies the shop's software, so we describe here everything it stores.
| Name | Purpose | Duration |
|---|---|---|
| __Host-portivo_auth, __Host-portivo_refresh | signing in to the customer account and keeping you signed in | 30 days |
| portivo_pending_booking_* | returning to a booking you started | 30 days |
| portivo_booking_token | access to a booking you started without signing in | 30 days |
| __Host-portivo_chat_access | access to the conversation with the operator | until the access expires |
| NEXT_LOCALE | your language | until you close the browser; 1 year after you pick a language in the shop |
| PORTIVO_CURRENCY | the currency prices are shown in | 1 year |
| portivo_preview, portivo_draft, portivo_live, __prerender_bypass | previewing and editing the shop before publication, for the operator's team only | up to 2 hours or until the preview expires |
| __stripe_mid, __stripe_sid | fraud prevention at payment; set by Stripe on the payment page | 1 year (__stripe_mid) and 30 minutes (__stripe_sid) |
| consent_v1 (browser storage) | your choice about consent and its date | until you change it or clear the site's data |
| portivo:favorites:v1 (browser storage) | favourite yachts saved without signing in | until you sign in or clear the site's data |
| portivo:searchReturn, portivo:searchReturnDepth (session storage) | returning to your search results | until the tab is closed |
| portivo.chat.v1:* (browser storage) | a copy of the conversation with the operator on the device, so the chat works on a weak connection | up to 7 days; removed when you sign out of your account |
| portivo:oauthCsrf (session storage) | securing sign-in with a Google account | until the tab is closed |
| /serwist/sw.js (browser service worker) | lets you install the shop like an app; intercepts no requests and keeps nothing in a cache | until the browser unregisters it or you clear the site's data |
| pv_logout_return | returning to the shop after signing out of a Google account | 5 minutes |
After consent to statistics: PostHog (EU cloud, Frankfurt) stores a ph_phc_*_posthog cookie for a year from the last visit and a copy of the identifier in browser and tab storage, to count visits, pages viewed, clicks and scrolling. Screen recording is off, and PostHog does not keep your IP address. Sentry (European Union region) collects information about errors and a sample of speed measurements, without cookies and without keeping your IP address. Google Analytics added by the operator (_ga, _ga_*) also loads only after this consent.
After consent to marketing: session storage keeps the source of the visit (portivo_attribution: the utm, gclid and fbclid campaign parameters, the first page visited and the address of the page you came from) and the payment event identifier (portivo_checkout_eid, portivo_eid:*, portivo_fbq_purchase:*), so the conversion report does not count the payment twice. Meta Pixel and TikTok Pixel also load if the operator has added them. Meta Pixel stores _fbp and _fbc cookies (Meta sets the duration), and TikTok Pixel stores _ttp, ttcsid, ttcsid_* and ttclid for 13 months from last use. Google Tag Manager and code added by the operator load only after consent to both statistics and marketing. The operator is responsible for its advertising tools and for the information about them; look for it in the operator's cookie policy.
A YouTube video in an article loads only after you click "Play video": until then YouTube receives nothing, and after the click it sees your IP address and may store its own cookies.
Regardless of consent and without storing anything on your device, the shop's server reports its own errors to Sentry, and the booking system records booking and purchase events in PostHog. Each shop's cookie policy, in the part Portivo writes, gives the full list with providers, retention, legal basis and the transfer of data to the USA.
05The Portivo dashboard
The dashboard is for charter companies' teams. Essential entries:
| Name | Purpose | Duration |
|---|---|---|
| auth-token | the signed-in user's session | 24 hours, 7 days after signing in with Google |
| security-session-at | confirming your identity before a sensitive operation | 5 minutes |
| pv_panel_locale | the dashboard language you chose | 1 year |
| pv_admin_viewas, pv_admin_viewas_tid | a Portivo administrator viewing the dashboard during technical support | 1 hour |
| auth-token-oauth-return | returning to the right page after signing in with a Google account | until sign-in completes |
| auth-token-security-return | returning to the right page after confirming your identity | 10 minutes |
| __Host-portivo_oauth_binding | securing the connection between the dashboard and an AI assistant (MCP) | 24 hours |
| portivo.chat.v1:* (browser storage) | a copy of conversations on the device, so the chat works on a weak connection | up to 7 days |
| pv-charter-rq (browser storage) | loading dashboard data faster | 24 hours |
After analytics consent: PostHog stores a ph_* cookie and counts how dashboard features are used, and Sentry collects information about errors and records the parts of a session in which an error occurred, with text and images hidden (storing sentryReplaySession in session storage as it does).
06Managing consent
In the shop and in the dashboard, a banner with a choice of categories appears on your first visit. Analytics and marketing consent are off by default.
You can change your choice at any time through the "Cookie settings" link in the shop's or the dashboard's footer. operator.portivo.eu has no banner: we store no cookies here, and you can switch the visit statistics and the performance measurement off with a Global Privacy Control or Do Not Track signal.
You can also delete and block cookies in your browser settings. Blocking essential cookies will stop some features from working, such as signing in.
Withdrawing consent does not affect the lawfulness of processing before it.
07Legal basis
Storing information on your device and accessing it are based on Article 399 of the Polish Electronic Communications Law of 12 July 2024. The further processing of data is described in our privacy policy.
08Contact
Send questions about cookies to privacy@portivo.eu.
Change history
- This version
Shops: Portivo as controller of statistics and error reports, session recording off, the source of the visit only after consent to marketing, Google Tag Manager and operator code only after consent to both categories, the full list of entries, including the service worker and the TikTok Pixel cookies, a YouTube video only after a click.
Visit statistics with no cookies and nothing stored on the device, and the site's address: operator.portivo.eu in place of portivo.eu.
Split into portivo.eu, the shops and the dashboard, the full list of entries with their duration, performance measurement without cookies.
Three categories of cookies and managing consent.