Legal

Cookie policy

Last updated 1 September 2026

This page lists every cookie we set, what each one is for, and how to change your mind. There are fewer than you might expect, and none of them follow you to other websites.

What a cookie is What we ask you Cookies we need Cookies you can refuse Changing your mind Blocking them yourself

What a cookie is

A small file a website stores in your browser. Some are read only by us; some are read by the company that put them there.

We also use two things that are not technically cookies but do a similar job, and we list them here anyway because the difference does not matter to you: local storage, which keeps your language and theme choice, and session storage, which holds a booking while you are filling it in.

The first time you arrive, a bar appears at the bottom asking whether we may measure how the site is used.

Nothing is measured until you accept. If you close the bar without choosing, nothing is measured. If you decline, nothing is measured and we do not ask again on that browser.

The site works exactly the same either way. You can book, pay, sign in and use support having declined everything.

Cookies we need to work

These are not optional and we do not ask permission for them, because without them the site cannot do what you came for. Under EU law, cookies strictly necessary to deliver a service you asked for do not require consent.

Signing in

Set by Supabase, which handles our accounts. It keeps you signed in between pages, so you are not asked for your password on every click. It is removed when you sign out.

Names: sb-*-auth-token and related entries in local storage. Kept: until you sign out, or one year.

Paying

Set by Stripe, which processes payments, when you reach the checkout. Stripe uses them to detect fraud — a card being tried from a browser that has just tried nine other cards, for example. We never see your card number, and Stripe does not use these to advertise to you.

Names: __stripe_mid, __stripe_sid. Kept: up to one year and 30 minutes respectively.

Your booking while you fill it in

Stored by us, in your browser only. It holds the route, date and passengers so a refresh does not lose what you typed. It never reaches our servers on its own and is cleared when you finish or leave.

Your language and theme

Stored by us. Remembers that you chose Portuguese, or dark mode, so we do not ask again. Kept: until you clear your browser.

Your cookie choice

Stored by us. Remembers what you answered on the bar, so it does not appear on every page. Slightly ironic, and unavoidable.

Cookies you can refuse

Google Analytics

Tells us how many people visit, which pages they read, and where they gave up. We use it to find the parts of the site that are not working — a page nobody finishes, a form people abandon.

These are only set if you accept. The Google script is not even loaded until then.

We do not use it for advertising, we have not enabled remarketing or Google Signals, and IP addresses are shortened before they are stored. We cannot identify you from it, and we do not try.

Names: _ga, _ga_*. Set by: Google Ireland Limited. Kept: up to two years.

Google’s own explanation is at policies.google.com/technologies/cookies.

Things that are not cookies but load from elsewhere

Two parts of the site load content from other companies. They can see your IP address, because any request to any server can, but they do not set cookies to identify you.

Changing your mind

At the bottom of any page there is a link marked Cookie settings. Click it and the bar comes back, with your previous answer cleared.

Withdrawing consent is exactly as easy as giving it. That is deliberate, and it is what the law requires.

Refusing after having accepted stops any further measurement. It does not delete what was already collected — for that, write to us and we remove it.

Blocking them yourself

Every browser can block cookies, and you do not need our permission. Be aware that blocking all cookies breaks signing in and paying — not because we made it that way, but because there is no other means for a website to remember you are the same person between two pages.

Who to ask

Airportlink is operated by Transitan Tourism Tours Ltd, registered in Ireland under number 781297.

Questions about this page, or a request to delete what we hold, go to our support page. What we collect and why is in our privacy policy.

If we add a cookie that is not on this list, this page is updated on the same day and the consent bar appears again. Consent given for one thing does not carry over to another.