Privacy

Cookies and tracking

Everything stored on your device when you use AI Concierge, what it is for, and the switches to turn the optional parts off.

Last updated

October 10, 2026

Two kinds of thing get stored on your device when you use AI Concierge. The first kind is what makes the site work — signing you in, holding a booking together between steps, taking a payment, and crediting a partner if you arrived on their link. Without it there is no site, so there is nothing to agree to. Everything else is optional, off until you say otherwise, and listed below in full: what it stores, how long it keeps it, and which companies see it.

Nothing on this page gates anything. Switch it all off and every search, price and booking behaves exactly as it does now.

Your current choice

You haven’t answered yet, so nothing optional is running. That is the default and it stays that way until you change it here.

What we ask for

Essentials

Always on

What the site needs to work at all: keeping you signed in, holding a booking together across steps, taking a payment, remembering the choice you make right here, and crediting a partner if you arrived on their link. There is no version of the site that runs without these, so there is nothing to switch off.

What it puts on your device

  • Microsoft Clarity cookiesCookie· Set by Microsoft; see the Microsoft Privacy Statement

    Microsoft Clarity and Microsoft Advertising set first- and third-party cookies to record behavioral metrics, heatmaps and session replay, so we can improve and market our products and services.

  • aic_consentLocal storage· 12 months

    The choice you make on this screen, so we stop asking.

  • aic_anon_idLocal storage· 12 months

    A random ID whose only job is to file your consent record. It is never sent to an analytics or advertising company.

  • jwt-token / app-session-activeLocal storage· Until you sign out

    Keeps you signed in between page loads.

  • refresh_tokenCookie· Until you sign out

    Renews your session without making you sign in again. Not readable by any script, including ours.

  • persist:rootLocal storage· Until you clear site data

    Holds the trip or search you have in progress so a refresh does not lose it.

  • aic_popup_dismissed / aic_topbar_dismissedLocal storage· Until you clear site data

    Remembers that you dismissed the mobile app prompt, so it stops appearing.

  • aic_cello_uccCookie· 30 days

    Remembers which partner or referral link brought you here, so that partner gets credit for the visit.

  • aic_referral_redirected_uccLocal storage· Until you clear site data

    Remembers that a referral link already offered you the mobile app once, so it does not do it again on every page.

Who processes this

  • Clerk — Signs you in and keeps your session alive.
  • Microsoft Clarity — We improve our products and advertising by using Microsoft Clarity to see how you use our website. By using our site, you agree that we and Microsoft can collect and use this data. Our privacy statement at aiconcierge.vip/privacy-policy has more details.
  • Stripe — Takes the payment when you book.
  • Cloudflare — Runs the challenge that keeps bots off the sign-in form.
  • Amazon Web Services — Hosts the site and serves its files.
  • Google — Serves the typefaces the site is set in and the map views inside it.
  • Cello — Credits a partner when someone arrives on their referral link.

Analytics

How the site actually gets used, and what breaks while you use it — pages opened, things clicked, errors thrown, including recorded sessions of on-screen activity, with anything you type masked out. Turning this off changes nothing about what you can see, search or book. You'll simply be invisible to us, and we'll be slower to notice when something breaks for you.

What it puts on your device

  • Analytics identifier (local storage)Local storage· 12 months

    Ties your visits together so a funnel or a replay is one person rather than a hundred strangers.

  • Replay session identifierSession storage· Until you close the tab

    Keeps a single recorded session in one piece across page changes.

Who processes this

  • PostHog — Product analytics and session replay.
  • Sentry — Error monitoring, plus a replay of the moments around an error.

Marketing

Loads Google Tag Manager on every page with ad and analytics storage denied by default, then measures sanitized page changes only after you switch marketing on. Page paths have query strings removed and likely identifiers redacted. When JavaScript is disabled, the required GTM fallback still contacts Google because the in-app consent control cannot run. Withdrawing later denies Google storage and stops new app page events.

What it puts on your device

  • Google marketing tag storage (set only by published container tags)Cookie· Controlled by the published GTM tag configuration

    Measures consented marketing activity. Exact cookies and retention depend on the tags published in the GTM container.

Who processes this

  • Google Tag Manager — Loads approved marketing tags and receives sanitized page-change events after consent.

Browser signals

If your browser sends a Global Privacy Control signal, we read it and treat analytics and marketing as declined without asking you first. You can still turn them on here if you want to — the signal is a default, not a lock.

When we ask again

After twelve months, or sooner if what we do with the data changes. An expired answer stops counting the moment it expires: nothing optional runs in the gap between it lapsing and you answering again.

This page describes version 5 of our cookie policy. Microsoft Clarity (behavioral metrics, heatmaps, session replay) and Microsoft Advertising are disclosed under Essentials, with no switch, and the privacy policy now names them. Visitors who answered under version 4 are asked again so they see this.

What we cannot switch off from here

The edge network that serves this site injects a small traffic analytics script of its own, after our application has finished building the page. It is configured where the site is hosted rather than in the site’s code, so these switches cannot reach it. We are separating it out; until then we would rather say so than let this list read as complete when it is not.