Choose which cookies stay, which ones go.
Four categories, granular control. Essential cookies are always on — without them the booking engine can't issue a ticket. Everything else is a choice you make, change any time. Preferences save to this browser and travel across every Istanbul Tourist Information domain.
Always on Strictly necessary — booking engine won't run without these 3 cookies
Keep the session alive, remember ticket selection between pages, verify payment at checkout. No tracking. Locked because turning them off means the site literally can't complete a booking.
| Name | Domain | Purpose | Expires |
|---|---|---|---|
| _iti_session | .istanbul-tourist-information.com | Session ID for cart + checkout | On close |
| _iti_csrf | .istanbul-tourist-information.com | CSRF protection | Session |
| _iti_consent | .istanbul-tourist-information.com | Remembers this panel | 12 months |
Optional Functional — language, currency, programme translation 3 cookies
Remember language, currency, and the programme translation you chose last time. Used only for personalisation.
| Name | Domain | Purpose | Expires |
|---|---|---|---|
| _iti_locale | .istanbul-tourist-information.com | Interface language | 12 months |
| _iti_ccy | .istanbul-tourist-information.com | Last-used currency | 12 months |
| _iti_programme | .istanbul-tourist-information.com | Programme translation preference | 12 months |
Optional Analytics — anonymous usage statistics 4 cookies
GA4 with IP anonymisation, ad-signals disabled, demographics off. Sentry for crash reports with PII scrubbing.
| Name | Provider | Purpose | Expires |
|---|---|---|---|
| _ga | Google Analytics 4 | Unique anonymous visitor ID | 24 months |
| _ga_* | Google Analytics 4 | Session state | 24 months |
| _ga_gid | Google Analytics 4 | Short-lived session ID | 24 hours |
| _sentry | Sentry.io | Crash fingerprint — no PII | 14 days |
Optional Marketing — retargeting and campaign attribution 3 cookies
If on, we tell Meta and Google Ads you visited. They re-show our ceremony tickets to you. Off by default — opt-in.
| Name | Provider | Purpose | Expires |
|---|---|---|---|
| _fbp | Meta Pixel | Retargeting + attribution | 90 days |
| _gcl_au | Google Ads | Conversion attribution | 90 days |
| _iti_utm | Istanbul Tourist Information | UTM source + campaign last-touch | 30 days |
What happens behind each cookie you allow.
Every category triggers a specific data flow — cookie set to use to deletion.
Cookie set on our domain when you consent.
Sent back on each request, used for session/preference.
Analytics into GA4 anonymised. Marketing into opaque IDs.
At expiry or consent revocation, downstream data purged.