Cookie Policy

Last updated 12 September 2026

Draft — not yet reviewed by a lawyer. This was written to describe accurately what this website really does, but it is not legal advice and it has not been checked by anyone qualified in Sri Lankan law.

Every highlighted item is a detail only TripzaCeylon can supply. Do not publish this page until they are filled in and a lawyer has read it.

1. The short version

This website sets no cookies. There is no advertising, no analytics, no Google Analytics, no Meta pixel, and nothing that follows you between sites.

Two things are still worth being straight with you about: a small amount of browser storage used by our staff-only admin page, and a few third-party servers your browser contacts to fetch fonts and photographs. Both are below.

2. Cookies we set

None. If you inspect this site you will not find a cookie from us.

3. Browser storage

Our staff admin page — which visitors have no reason to open and cannot use without a password — keeps two things in your own browser:

WhatWhyHow long
A sign-in tokenSo a staff member isn't asked for their password on every clickCleared when the browser tab closes

Neither is used for tracking and neither leaves your device except to authenticate with our database provider.

4. Third parties your browser contacts

When a page loads, your browser fetches some things from other companies' servers. Those companies necessarily see your IP address and basic request information, in the same way any website you visit does. They are:

WhoWhat forSets cookies?
GitHub PagesHosts and serves this siteNo
Google FontsThe two typefaces this site usesNo, but Google receives your IP address
UnsplashThe photographsNo, but Unsplash receives your IP address
Web3Forms and SupabaseContacted only at the moment you press Send on the enquiry formNo

If you follow a link to our WhatsApp, Instagram, Facebook or TikTok, you leave this site and that company's own policies take over. We have no control over what they do.

Consent banners exist because of rules on storing or reading information on your device — cookies, mainly. We store nothing on your device, so there is nothing to ask permission for, and a banner would be noise pretending to be care.

One honest caveat: European regulators have taken the view that loading fonts from Google's servers transfers a visitor's IP address to a third party and needs its own justification. We think the safer answer is not a banner but removing the transfer — see the note in our risk register about serving the fonts and images from our own site instead. Decide whether to self-host fonts and images before launch.

6. How to control all of this

Your browser can block third-party requests, and privacy extensions can block them selectively. Nothing on this site will break if you do — the pages will simply fall back to your system fonts and show empty spaces where photographs would be.

Questions: info@tripzaceylon.com.