FlySpa Sàrl Cookie Policy

Version 1.0 of 16 October 2026. Effective from its publication on flyspa.ch. Next review: October 2027.

This policy supplements our privacy policy. It describes the cookies and similar technologies (browser local storage, signals sent to our measurement server) used on flyspa.ch and booking.flyspa.ch by FlySpa Sàrl, Rue de Genève 101, 1226 Thônex, Switzerland. Contact: info@flyspa.ch.

1. What is a cookie?

A cookie is a small file stored by your browser when you visit a website. Local storage (localStorage) is a similar space, specific to each website, that keeps information until it is deleted. These technologies make a website work, remember your choices, measure its traffic or measure the effectiveness of advertising.

2. Your choices

On your first visit, a banner lets you accept, reject or choose by category. Rejecting is as easy as accepting. Only strictly necessary cookies are used until you make a choice or if you reject.

You can change your choice at any time via the "Cookie settings" link at the bottom of each page. If you withdraw your consent, the tools concerned are deactivated and the campaign identifiers stored by FlySpa are deleted automatically. Your choice is kept for 13 months, after which the banner is shown again.

You can also delete cookies and local storage in your browser settings.

3. Categories and detailed list

The durations shown are maximum durations. Where storage depends on an action (arriving from an ad, signing in), it only happens in that case.

3.1 Strictly necessary

Essential for the operation and security of the websites, or to record your choice. They cannot be deactivated from the banner. Legal ground: overriding interest (operation of the service).

NameProviderPurposeDuration
CookieScriptConsentFlySpa (CookieScript tool)remember your cookie choices13 months
_GRECAPTCHAGoogle (google.com)protect flyspa.ch forms against bots (reCAPTCHA)6 months
YJOWsLSpP, zDeGlwZqdbNkFlySpa (flyspa.ch web server)technical web server cookies, with no measurement or advertising purpose1 day
XSRF-TOKENFlySpa (booking.flyspa.ch)protect exchanges with the booking platform against request forgerysession
accessToken (local storage)FlySpa (booking.flyspa.ch)keep you signed in to your customer accountuntil sign-out
firebaseToken (local storage)FlySpa (Firebase, Google)send you booking notifications, if you allow themuntil sign-out or withdrawal of permission
pusherTransportTLS (local storage)FlySpa (Pusher)update your bookings in real timeuntil cleared by the browser
ddSession (local storage)FlySpa (booking.flyspa.ch)keep the booking platform's technical sessionuntil cleared by the browser

3.2 Functionality

Remember your display preferences. Legal ground: overriding interest.

NameProviderPurposeDuration
wp-wpml_current_languageFlySpa (flyspa.ch, WPML plugin)remember the chosen languagesession
resolutionFlySpa (flyspa.ch)adapt the display to your screen sizesession
i18nextLng (local storage)FlySpa (booking.flyspa.ch)remember the chosen languageuntil cleared by the browser

3.3 Performance (audience measurement)

Measure traffic and use of the websites, through our measurement server nlpd.flyspa.ch (Stape, hosted in France) and then Google Analytics 4. Legal ground: consent.

If you reject, none of these cookies is set; Google Analytics only receives signals without a persistent identifier, used for aggregate statistics (overriding interest).

NameProviderPurposeDuration
_gaFlySpa (Google Analytics)distinguish visitors pseudonymously13 months
_ga_2T0GD6YH88FlySpa (Google Analytics)keep the measurement session state13 months
FPIDFlySpa (measurement server, Google Analytics)measurement identifier managed by our server13 months
FPLCFlySpa (measurement server, Google Analytics)link a visit between flyspa.ch and booking.flyspa.ch20 hours
stape (cookie and local storage)FlySpa (measurement server, Stape)technical identifier of the measurement server, for reliable measurement13 months

3.4 Targeting (advertising and campaign measurement)

Measure the effectiveness of our ads, attribute bookings to the campaigns that generated them and allow our ads to be shown to people who visited our websites. Legal ground: consent. None of these items is set or read if you reject.

NameProviderPurposeDuration
_gcl_auFlySpa (Google Ads)measure conversions from our Google ads90 days
_gcl_awFlySpa (Google Ads)keep the Google Ads click identifier90 days
FPAU, FPGCLAWFlySpa (measurement server, Google Ads)server-managed equivalents for Google Ads conversion measurement90 days
IDEGoogle (doubleclick.net)Google remarketing and ad measurement1 year
_fbpFlySpa (Meta)measure and optimise our Facebook and Instagram campaigns90 days
_fbcFlySpa (Meta)keep the Meta click identifier90 days
li_fat_idFlySpa (LinkedIn)keep the LinkedIn click identifier30 days
bcookie, lidc, li_sugr, UserMatchHistory, AnalyticsSyncHistoryLinkedIn (linkedin.com)Insight Tag: measurement and targeting of our LinkedIn campaignsfrom 24 hours to 1 year depending on the cookie
__kla_idFlySpa (Klaviyo)recognise your browsing to personalise our communications2 years
__kl_key, $referrer, $last_referrer (local storage)FlySpa (Klaviyo)identification and referring site for Klaviyountil consent is withdrawn or cleared by the browser
_gtmeec (cookie) and gtmeec (local storage)FlySpa (measurement server, Stape)keep identification data entered during a booking or sign-up, to send it hashed to advertising platforms90 days (cookie); until consent is withdrawn (local storage)
flyspa_gclid, flyspa_gbraid, flyspa_wbraid (local storage)FlySpaattribute a booking to a Google Ads campaignuntil consent is withdrawn (automatic deletion)
flyspa_fbclid (local storage)FlySpaattribute a booking to a Meta campaignsame
flyspa_li_fat_id (local storage)FlySpaattribute a booking to a LinkedIn campaignsame
flyspa__kx (local storage)FlySpaattribute a booking to a Klaviyo email campaignsame
flyspa_ttclid (local storage)FlySpaattribute a booking to a TikTok campaign (channel not used at present)same
flyspa_utm_source, flyspa_utm_medium, flyspa_utm_campaign (local storage)FlySpakeep the source, medium and campaign of your arrivalsame

"FlySpa" in the Provider column means the item is stored on our own domains; the tool shown in brackets uses its content.

4. Signing in with Google, Apple or Facebook

If you choose to sign in to booking.flyspa.ch with your Google, Apple or Facebook account, the chosen provider sets its own cookies on its domain during sign-in, under its own policy. Nothing is loaded until you click the corresponding sign-in button.

5. Recipients and transfers

The recipients of data collected through these technologies (Google, Meta, LinkedIn, Klaviyo, Stape, CookieScript) and the safeguards for transfers abroad are described in sections 7 and 8 of our privacy policy.

6. Changes

We update this policy when we add, remove or change a tool. The list is reviewed at least once a year.

Last updated: 16 October 2026.

Back to flyspa homepage

flyspa