TiketCaribbean Cookie Policy
Issued by CaribraConnect Technology Ltd, trading as TiketCaribbean. Effective 6 September 2026. Last updated 6 September 2026.
In short
The website sets sign-in and security cookies without asking, because it cannot work without them. Google Analytics loads only if you accept it. We use no advertising or tracking cookies. The mobile app uses no cookies at all.
1. What cookies and similar technologies are
Cookies are small text files a website stores in your browser. Websites also use browser storage ("local storage" and "session storage"), which works in a similar way but is not sent to servers automatically. UK law (the Privacy and Electronic Communications Regulations, PECR) treats both the same: we can use them without asking only when they are strictly necessary for something you have asked for, and we must ask your permission for anything else.
The TiketCaribbean mobile app does not use cookies. It keeps your session in the device's secure storage and does not include analytics or advertising libraries.
2. Your choice
When you first visit the website a banner offers Accept all, Reject all, or Manage preferences. Nothing non-essential loads until you choose. Your choice is stored in your browser (see the table below) and you can change it here at any time:
Changing your mind takes effect on the next page load, because a script that has already loaded cannot be unloaded. You can also delete cookies and site data through your browser settings; if you delete our consent record the banner will simply ask you again.
3. Strictly necessary cookies and storage
These make the website work and are set without consent. If you block them you will not be able to sign in.
| Name | Type | Purpose | How long |
|---|---|---|---|
| accessToken | Cookie (Secure, SameSite=Lax) | Keeps you signed in for API requests | 1 hour, refreshed while you use the site |
| refreshToken | Cookie (Secure, SameSite=Lax) | Renews your sign-in without asking for your password again | Up to 7 days in the browser; the session itself lasts 1 day, or 30 days if you tick Keep me signed in |
| XSRF-TOKEN | Cookie (Secure, SameSite=Strict) | Protects forms against cross-site request forgery | Session |
| tc_cookie_consent_v1 | Local storage | Records the cookie choice you made and when | Until you clear it |
| tiket-caribbean-user, tiket-keep-me-signed-in, tiket-token-expires-at, tiket-session-activity | Local storage | Cache of your signed-in profile and session timing, so pages load without a round trip | Until you sign out |
| tiket-oauth-provider, tiket-oauth-terms-accepted | Session storage | Completes a Google or Apple sign-in that started on another page | Until the tab closes |
| checkout-pending-order, tc-payout-bank-country, tc-payout-return-to | Local storage | Resumes a checkout or payout setup after a redirect (only when those features are enabled) | Until the flow completes |
| tiket-caribbean.scanner.deviceId | Local storage | Identifies a scanning device so scans can be audited | Until cleared |
| Supabase auth entries (sb-…) | Local storage | Set by our sign-in provider during Google or Apple sign-in | Session |
| Cloudflare Turnstile (cf_clearance and similar) | Cookie, set by Cloudflare | Bot protection on sign-up and other forms. Sign-in does not use it | Set by Cloudflare, typically under 1 day |
4. Preference storage (no personal data)
These remember display choices on your device. They contain no personal information and are not sent anywhere, so consent is not required, but you can clear them at any time.
| Name | Purpose |
|---|---|
| tiket-theme-preference | Light or dark mode |
| skipSplash, splashShown | Whether to show the intro animation again |
| wah-happening-saved | Posts you saved for later while browsing |
| organiser-promo-dismissed, organiser-feedback-banner-dismissed, organiser-business-email-banner-dismissed, organiser-onboarding-progress, organiserSidebarGroups.v1, security_modal_preferences | Banners you dismissed and how you left the organiser dashboard laid out |
| admin-moderation-* and admin-screened-media | Layout state in the staff moderation tools (staff accounts only) |
5. Analytics cookies (only with your consent)
If you accept analytics, we load Google Tag Manager, which loads Google Analytics. Google sets cookies whose names begin with _ga to recognise your browser across visits and measure which pages are used and how the site performs. The data goes to Google and is subject to Google's privacy policy. We use it only to understand how the site is used; we do not use it for advertising.
Google Analytics cookies usually last up to 2 years. You can withdraw consent using the button above, and Google offers a browser add-on that blocks Google Analytics everywhere.
6. Marketing cookies
The banner includes a Marketing option because the consent record supports it, but we do not currently use any marketing or advertising cookies, pixels or trackers. If we ever add one we will update this policy and it will load only for people who accepted that category.
7. Other third-party content on the website
Some pages load content from other companies. Loading it tells that company your IP address, as any web request does. None of it is used to track you across other websites.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) supply the typefaces on every page. Google states it does not use font requests for tracking.
- OpenStreetMap tiles are loaded when you open a map view.
- SecurityScorecard security-rating badge on the home page and the Security page is loaded only after you accept analytics cookies; otherwise you see a link instead.
- Stripe pages are used for payment when paid ticketing is enabled; Stripe sets its own cookies on its pages for fraud prevention.
- Google and Apple sign-in pages set their own cookies when you use them.
8. The law and your rights
For visitors in the UK this policy is issued under regulation 6 of PECR and the UK GDPR; the ICO's guidance on cookies explains the rules. In the EU the equivalent is the ePrivacy Directive as implemented locally. We apply the same opt-in approach to every visitor.
How the information collected through cookies is used, and your rights over it, are covered by the Privacy Policy. Questions: support@tiketcaribbean.com with the subject line "Cookies".
9. Changes
We update this page whenever a cookie or third-party script is added or removed. The date at the top shows the current version. If we add a new non-essential category we will ask for your consent again.
10. Common questions
- Does TiketCaribbean use tracking or advertising cookies?
- No. The only optional cookies are Google Analytics, and they load only after you accept them. There are no advertising pixels or cross-site trackers.
- How do I change my cookie choice?
- Click Manage cookie preferences on this page or in the website footer. Your new choice applies from the next page load.
- Does the mobile app use cookies?
- No. The app stores your session in secure device storage and contains no analytics or advertising SDKs. It sends anonymous crash reports to Sentry.