Cookie Policy
Last updated: October 30, 2026
1. Introduction
This Cookie Policy briefly explains how Mappu uses cookies and similar technologies on the website and, where relevant, in the app.
For broader information about personal data processing and your rights, also see our Privacy Policy
2. Managing preferences
Non-essential tools remain disabled until you enable them. You can accept them, reject them, or change your choice at any time from the banner or from this page.
You can also use your browser or device settings to limit or delete cookies and other local data. Blocking strictly necessary tools may, however, affect some essential features.
3. What we mean by cookies and similar technologies
In this policy, “cookies and similar technologies” includes browser cookies, local/session storage, scripts or SDKs that read or store information on the browser or device, and server-side records of your consent choice when needed for compliance purposes.
4. Categories used by Mappu
On Mappu, we distinguish essential tools, optional analytics, and optional measurement for our ads, external offers, and native app installs.
Technical and essential
They are used to keep the service working, protect access, and remember your cookie choice.
Optional analytics
They help us measure page views, reliability, performance, low-cardinality product interactions, and masked replay/heatmaps, only if you enable them.
Ads, offers & app installs
Measures whether a visit from our Google ads leads to a sign-up or purchase (no ad personalization), partner offers you open, tour, ticket and travel-search cards from partners such as GetYourGuide, Travelpayouts and Booking.com, which may set their own cookies, and how the native app was found before installation. Measuring ads and installs also requires Analytics.
5. Main tools, providers, and durations
Below you will find the main tools currently relevant on Mappu.
mappu_cookie_consent
Function
Stores your cookie choice.
Category
Technical and essential
Activation
Always active
Duration
180 days
Party
First party
i18nextLng / mappuPreferredLanguage
Function
Remembers the chosen language.
Category
Technical and essential
Activation
Always active
Duration
Until changed or deleted
Party
First party
Technical sign-in and session storage
Function
Maintains sign-in and continuity of requested features.
Category
Technical and essential
Activation
Always active
Duration
Session or until logout/technical expiry
Party
First party / authentication provider
Cloudflare Turnstile
Function
Protects anonymous access and helps prevent abuse.
Category
Technical and essential
Activation
When needed
Duration
Technical verification time
Party
Third party
Google sign-in (One Tap)
Function
When you open the sign-up sheet on the website, loads Google Identity Services to offer a one-tap sign-in to Mappu with your Google account. In Chrome it uses FedCM, without third-party cookies; in other browsers Google may use its own cookies.
Category
Technical and essential
Activation
When you open the sign-up sheet
Duration
According to Google’s cookies
Party
Third party (Google)
Sentry
Function
Helps measure errors, performance, and service reliability.
Category
Optional analytics
Activation
Only with consent
Duration
According to session and technical configuration
Party
Third party
Google Analytics / Firebase Analytics
Function
Helps measure page views and product activity. On Android, if Analytics and Ads, offers & app installs are enabled, it may also record a broad install source. Original referral details are not sent; on the website, ad click identifiers are sent only with Ads, offers & app installs.
Category
Optional analytics
Activation
Analytics consent; Android install measurement also requires Ads, offers & app installs
Duration
According to Google/Firebase Analytics cookie, SDK, and technical configuration
Party
Third party
Visit source (Mappu)
Function
Remembers, as broad categories, how you first reached Mappu (for example a search engine, an AI assistant or a campaign link) and the public page you landed on, so we can see which pages lead to walks and purchases. Full referral addresses, search terms and click identifiers are not stored. A broad source label may be added to app store links.
Category
Optional analytics
Activation
Consent only
Duration
30 days in your browser; with your account and purchase records until you withdraw consent or delete your account
Party
First party
Google Ads
Function
On the website, measures whether a visit from one of our Google ads leads to a sign-up or purchase. No remarketing or ad personalization.
Category
Ads, offers & app installs
Activation
Only with Analytics and marketing consent
Duration
According to Google Ads cookies (up to 90 days)
Party
Third party (Google)
Apple AdServices
Function
Measures whether an iOS app install was attributed to Apple Ads. The original attribution token is not retained.
Category
Ads, offers & app installs
Activation
Only with Analytics and marketing consent
Duration
According to anonymous-session or account retention
Party
Third party (Apple) / first-party storage
Microsoft Clarity
Function
Helps us understand page/app interactions, heatmaps, and masked session replay for UX and reliability diagnostics; sensitive surfaces are masked and custom events/tags must not send free-text prompts, destinations, exact coordinates, identifiers, or payment data.
Category
Optional analytics
Activation
Only with consent
Duration
According to Microsoft Clarity cookie, SDK, consent, and technical configuration
Party
Third party
External-offer measurement
Function
Records limited information when you choose to open some partner offers.
Category
Ads, offers & app installs
Activation
Only with marketing consent
Duration
No dedicated Mappu cookie; external sites apply their own policies
Party
First party / third party
GetYourGuide (tour card)
Function
On some audio-guide pages of the website, shows a card with tours and tickets from our partner GetYourGuide. The card is loaded from GetYourGuide and may set its cookies.
Category
Ads, offers & app installs
Activation
Only with marketing consent
Duration
According to GetYourGuide’s cookies
Party
Third party (GetYourGuide)
Travelpayouts partner widgets
Function
In the app and on some pages of the website, shows travel-search widgets from partners in the Travelpayouts network, such as Aviasales flight search, Klook tours, transfer search and eSIM offers. The widgets are loaded from Travelpayouts (tpscr.com) and may set their partners’ cookies.
Category
Ads, offers & app installs
Activation
Only with marketing consent
Duration
According to the cookies of Travelpayouts and its partners
Party
Third party (Travelpayouts and its partners)
Booking.com (stays search)
Function
In the app and on some pages of the website, shows a search for hotels and other stays from our partner Booking.com. The search is loaded from Booking.com (its prelanding_sdk script and an iframe from www.booking.com). Booking.com sets its own cookies inside the iframe, under its privacy and cookie statement.
Category
Ads, offers & app installs
Activation
Only with marketing consent
Duration
According to Booking.com’s cookies
Party
Third party (Booking.com)
CJ (Commission Junction), affiliate network
Function
With the Booking.com stays search, CJ, our affiliate network, loads an impression pixel and routes clicks through www.jdoqocy.com, www.tqlkg.com, www.ftjcfx.com and www.awltovhc.com. These set tracking cookies so that a booking made through the search is credited to Mappu.
Category
Ads, offers & app installs
Activation
Only with marketing consent
Duration
According to CJ’s cookies
Party
Third party (CJ)
| Tool / provider | Function | Category | Activation | Duration | Party |
|---|---|---|---|---|---|
| mappu_cookie_consent | Stores your cookie choice. | Technical and essential | Always active | 180 days | First party |
| i18nextLng / mappuPreferredLanguage | Remembers the chosen language. | Technical and essential | Always active | Until changed or deleted | First party |
| Technical sign-in and session storage | Maintains sign-in and continuity of requested features. | Technical and essential | Always active | Session or until logout/technical expiry | First party / authentication provider |
| Cloudflare Turnstile | Protects anonymous access and helps prevent abuse. | Technical and essential | When needed | Technical verification time | Third party |
| Google sign-in (One Tap) | When you open the sign-up sheet on the website, loads Google Identity Services to offer a one-tap sign-in to Mappu with your Google account. In Chrome it uses FedCM, without third-party cookies; in other browsers Google may use its own cookies. | Technical and essential | When you open the sign-up sheet | According to Google’s cookies | Third party (Google) |
| Sentry | Helps measure errors, performance, and service reliability. | Optional analytics | Only with consent | According to session and technical configuration | Third party |
| Google Analytics / Firebase Analytics | Helps measure page views and product activity. On Android, if Analytics and Ads, offers & app installs are enabled, it may also record a broad install source. Original referral details are not sent; on the website, ad click identifiers are sent only with Ads, offers & app installs. | Optional analytics | Analytics consent; Android install measurement also requires Ads, offers & app installs | According to Google/Firebase Analytics cookie, SDK, and technical configuration | Third party |
| Visit source (Mappu) | Remembers, as broad categories, how you first reached Mappu (for example a search engine, an AI assistant or a campaign link) and the public page you landed on, so we can see which pages lead to walks and purchases. Full referral addresses, search terms and click identifiers are not stored. A broad source label may be added to app store links. | Optional analytics | Consent only | 30 days in your browser; with your account and purchase records until you withdraw consent or delete your account | First party |
| Google Ads | On the website, measures whether a visit from one of our Google ads leads to a sign-up or purchase. No remarketing or ad personalization. | Ads, offers & app installs | Only with Analytics and marketing consent | According to Google Ads cookies (up to 90 days) | Third party (Google) |
| Apple AdServices | Measures whether an iOS app install was attributed to Apple Ads. The original attribution token is not retained. | Ads, offers & app installs | Only with Analytics and marketing consent | According to anonymous-session or account retention | Third party (Apple) / first-party storage |
| Microsoft Clarity | Helps us understand page/app interactions, heatmaps, and masked session replay for UX and reliability diagnostics; sensitive surfaces are masked and custom events/tags must not send free-text prompts, destinations, exact coordinates, identifiers, or payment data. | Optional analytics | Only with consent | According to Microsoft Clarity cookie, SDK, consent, and technical configuration | Third party |
| External-offer measurement | Records limited information when you choose to open some partner offers. | Ads, offers & app installs | Only with marketing consent | No dedicated Mappu cookie; external sites apply their own policies | First party / third party |
| GetYourGuide (tour card) | On some audio-guide pages of the website, shows a card with tours and tickets from our partner GetYourGuide. The card is loaded from GetYourGuide and may set its cookies. | Ads, offers & app installs | Only with marketing consent | According to GetYourGuide’s cookies | Third party (GetYourGuide) |
| Travelpayouts partner widgets | In the app and on some pages of the website, shows travel-search widgets from partners in the Travelpayouts network, such as Aviasales flight search, Klook tours, transfer search and eSIM offers. The widgets are loaded from Travelpayouts (tpscr.com) and may set their partners’ cookies. | Ads, offers & app installs | Only with marketing consent | According to the cookies of Travelpayouts and its partners | Third party (Travelpayouts and its partners) |
| Booking.com (stays search) | In the app and on some pages of the website, shows a search for hotels and other stays from our partner Booking.com. The search is loaded from Booking.com (its prelanding_sdk script and an iframe from www.booking.com). Booking.com sets its own cookies inside the iframe, under its privacy and cookie statement. | Ads, offers & app installs | Only with marketing consent | According to Booking.com’s cookies | Third party (Booking.com) |
| CJ (Commission Junction), affiliate network | With the Booking.com stays search, CJ, our affiliate network, loads an impression pixel and routes clicks through www.jdoqocy.com, www.tqlkg.com, www.ftjcfx.com and www.awltovhc.com. These set tracking cookies so that a booking made through the search is credited to Mappu. | Ads, offers & app installs | Only with marketing consent | According to CJ’s cookies | Third party (CJ) |
6. Providers on Mappu and external sites
Mappu uses Cloudflare Turnstile and, with analytics consent, Sentry, Google Analytics, Firebase Analytics, and Microsoft Clarity. With Analytics and marketing consent, Apple AdServices measures whether an iOS install came from Apple Ads. With the same consent, Google Ads measures sign-ups and purchases from our ads on the website. When you ask to continue in the Android app, we use a short-lived code only to complete that handoff; this is essential to the requested feature and is not analytics. Clarity uses masked replay and heatmaps. With marketing consent, some audio-guide pages on the website show a card from GetYourGuide, which may set its own cookies. With the same consent, Mappu shows travel-search widgets from Travelpayouts partners, such as Aviasales flight search, which may also set their own cookies. With the same consent, Mappu shows a stays search from Booking.com, which sets its own cookies, and CJ, our affiliate network, sets tracking cookies so that bookings made through it are credited to Mappu. External sites apply their own policies.
Partner policies: Booking.com privacy and cookie statement · CJ privacy policy
7. Durations
The main durations are indicated in the table above. Third-party tools are also subject to the technical timings and rules of the relevant provider.
8. Changes to this policy
We may update this Cookie Policy if the tools used, the applied categories, or the way consent is collected change. The updated version is published on this page.
9. Contacts
For questions about cookies, similar technologies, or the preferences recorded by Mappu, you can contact us using the following details:
Andrea Fenu, impresa individuale, operating as Mappu / mappu.ai, acts as controller for the processing described in this policy and in the Privacy Policy. For questions about cookies or consent choices, you can write to [email protected].
Company:
Andrea Fenu, impresa individuale, operating as Mappu / mappu.ai
Email:
[email protected]Address:
Via Giovanni Pascoli 32, 34129 Trieste (TS), Italy
P. IVA:
01414800324
Privacy Policy:
Privacy PolicyLegal info:
Legal infoExternal transmissions (外部送信)
Japan’s Telecommunications Business Act (Article 27-12) asks services to say what information a page or app sends from your device to others. This list covers the Mappu website and the Mappu apps for iOS and Android: for each tool it shows the data sent, who receives it, why and when. Tools marked “only with consent” send data only after you have turned on their category in the cookie settings.
Cloudflare (content delivery and security)
Data sent
IP address, browser and device information, address of the page or file requested.
Recipient
Cloudflare, Inc. (United States)
Purpose
Deliver the content of the website and apps quickly and protect it from attacks.
When
Always (strictly necessary)
Cloudflare Turnstile
Data sent
IP address, browser and device signals, interaction with the check.
Recipient
Cloudflare, Inc. (United States)
Purpose
Tell people from bots when you use Mappu without an account.
When
When the check is needed (strictly necessary)
Sign in with Google (One Tap)
Data sent
IP address, browser information, Google cookies or sign-in state; if you choose an account, Google sends us the email and ID of the Google account.
Recipient
Google LLC (United States)
Purpose
Offer you one-tap sign-in to Mappu.
When
When you open the sign-up screen on the website (strictly necessary for the feature)
YouTube (privacy-enhanced mode)
Data sent
IP address, browser information, the video played, YouTube cookies.
Recipient
Google LLC (United States)
Purpose
Play the video stories on guide pages.
When
Only when you press play
Push notifications
Data sent
Device push token or browser subscription, app identifier, notification content.
Recipient
Apple Inc. (iOS), Google LLC (Android and Chrome) or the browser maker’s push service (United States)
Purpose
Deliver the notifications you turned on.
When
Only after you turn notifications on
Voice dictation (speech recognition)
Data sent
The audio of your voice input; Mappu receives only the transcribed text.
Recipient
Your browser’s or device’s speech-recognition service: Google LLC (United States) on Chrome and usually on Android; Apple Inc. (United States) on iOS; in other browsers, the service chosen by the browser maker
Purpose
Turn your speech into text.
When
Only when you tap the microphone
Sentry
Data sent
Error and performance details, browser or device and app version, page address, pseudonymous identifier, IP address.
Recipient
Functional Software, Inc. (Sentry, United States)
Purpose
Find and fix errors and performance problems.
When
Only with consent (Analytics)
Google Analytics / Firebase Analytics
Data sent
Pages viewed, usage events, analytics identifier of the browser or app, device and browser information, approximate location derived from the IP address; on Android, with Ads, offers & app installs, the broad source of the install.
Recipient
Google LLC (United States)
Purpose
Measure how the website and apps are used.
When
Only with consent (Analytics)
Microsoft Clarity
Data sent
Masked replays of clicks, scrolls and taps, heatmaps, device and browser information, Clarity identifier.
Recipient
Microsoft Corporation (United States)
Purpose
Understand usability and reliability problems.
When
Only with consent (Analytics)
Google Ads
Data sent
Ad click identifier (gclid, gbraid, wbraid), sign-up and purchase events, Google Ads cookies.
Recipient
Google LLC (United States)
Purpose
Measure whether visits from our Google ads lead to sign-ups or purchases, with no remarketing or ad personalisation.
When
Only with consent (Analytics and Ads, offers & app installs), on the website
Apple AdServices
Data sent
One-time attribution token generated by the device.
Recipient
Apple Inc. (United States)
Purpose
Learn whether an install of the iOS app came from an Apple Ads campaign.
When
Only with consent (Analytics and Ads, offers & app installs), in the iOS app
GetYourGuide (tour card)
Data sent
IP address, browser information, page address, GetYourGuide cookies.
Recipient
GetYourGuide Deutschland GmbH (Germany)
Purpose
Show tours and tickets and credit bookings to Mappu.
When
Only with consent (Ads, offers & app installs), on some audio guide pages
Travelpayouts partner widgets
Data sent
IP address, browser information, page address, the search entered in the widget, partner cookies.
Recipient
Go Travel Un Limited (Travelpayouts, Hong Kong) and its partners, such as Aviasales and Klook
Purpose
Show flight, tour, transfer and eSIM searches and credit bookings to Mappu.
When
Only with consent (Ads, offers & app installs)
Booking.com (stays search)
Data sent
IP address, browser information, page address, the search entered, Booking.com cookies.
Recipient
Booking.com B.V. (Netherlands)
Purpose
Show the stays search and credit bookings to Mappu.
When
Only with consent (Ads, offers & app installs)
CJ (Commission Junction), affiliate network
Data sent
Impression and click data, IP address, browser information, CJ cookies.
Recipient
Commission Junction LLC (CJ, United States); in the EU and the United Kingdom, Epsilon International UK Ltd (United Kingdom)
Purpose
Credit bookings made through the Booking.com search to Mappu.
When
Only with consent (Ads, offers & app installs)
Partner offer measurement
Data sent
The offer opened, the page, the time and a click reference.
Recipient
Mappu and, when you open the offer, the partner’s site
Purpose
Count and reconcile clicks on partner offers and prevent fraud.
When
Only with consent (Ads, offers & app installs), when you open an offer
You can change your choice at any time from the cookie settings on the website or from Settings in the app. For questions about this list, write to [email protected].
© 2026 Mappu.ai. All rights reserved.