Cookies Disclosures
Cookies Disclosures
1. Internal Cookies & Similar Technologies Used on citypass.com
The following are first-party cookies used on CityPASS properties including international subdomains.
| Name | Domain | Source | Use | Expiration | Third-Party Privacy Policies |
| cp_cookies_accepted | *.citypass.com | CityPASS | Used to track if cookie notice has been accepted. | 1 year | |
| cp_across | *.citypass.com | CityPASS | Used to track the cart object(s) between checkout and receipt page | session | |
| cp_add_to_cart | *.citypass.com | CityPASS | Used to add products to cart on checkout | session | |
| cp_cart_items | *.citypass.com | CityPASS | Used to track the items that exist in the shopping cart | 30 days | |
| cp_cart_return | *.citypass.com | CityPASS | Used to distinguish whether or not users should see the `return to cart` message | 60 seconds | |
| cp_checkout_data | *.citypass.com | CityPASS | cart object | none | |
| cp_close_remind_me | *.citypass.com | CityPASS | This cookie was used as part of an A/B test in 2016, it is a relic | session | |
| cp_currency | *.citypass.com | CityPASS | Used to track the currency setting (e.g. USD, CAD, GBP, Euros) | 30 days | |
| cp_del | *.citypass.com | CityPASS | Used to track the delivery method selected during checkout | session | |
| cp_language | *.citypass.com | CityPASS | Used to track the language setting preference for a customer (e.g. English, Spanish, French, Spanish) | session | |
| cp_last_product_added | *.citypass.com | CityPASS | Used to track the last product added to the cart | 30 days | |
| cp_logged_in | *.citypass.com | CityPASS | Tracks if a user is logged-in to the Interchange admin (including wholesalers) | 12 hours | |
| cp_pp_shipmeth | *.citypass.com | CityPASS | Tracks if the PayPal payment method was selected | session | |
| cp_pp_token | *.citypass.com | CityPASS | Tracks a paypal token for that payment method | session | |
| cp_redirected | *.citypass.com | CityPASS | Tracks if a user was redirected to another translated locale (e.g. de.citypass.com) | session | |
| cp_src_log_override | *.citypass.com | CityPASS | Used to help track the affiliate marketing source | session | |
| cp_src_obj | *.citypass.com | CityPASS | Used to track promo discounts, including for logged-in wholesalers | 12 hours | |
| cp_step | *.citypass.com | CityPASS | Tracks which cart step the user was on most recently | session | |
| cp_when | *.citypass.com | CityPASS | Tracks which version of a product the customer viewed last. Either the `now` or `next` version, when a new program is available for purchase. | session | |
| cpaddcart | *.citypass.com | CityPASS | legacy cart cookie, it is a relic | session | |
| cpnumunits | *.citypass.com | CityPASS | Tracks the number of items added in the cart | 30 days | |
| mv_source | *.citypass.com | CityPASS | mv_source functionality is meant to record which affiliate should be given credit for an order. | 3 months | |
| cp_mini_cart | *.citypass.com | CityPASS | Used to track whether the `mini cart` summary was already displayed to a given user in the current session. | session | |
| myCity | .citypass.com | CityPASS | Used with the CityPASS `Travel Guide` progressive web app. Uses localStorage, which persists across sessions. This tracks the city purchased on citypass.com. | none | |
| MV_SESSION_ID | .citypass.com | CityPASS | Tracks a customer's session | session | |
| cjevent | .citypass.com | CityPASS | Used in affiliate tracking | 3 months | |
| _ceg.s | .citypass.com | Crazy Egg | Used to track visitor sessions | 3 months | https://www.crazyegg.com/privacy |
| _ceg.u | .citypass.com | Crazy Egg | Used to track visitors | 3 months | https://www.crazyegg.com/privacy |
| _ga | .citypass.com | Google Analytics | Google Analytics (including related advertising services). Used to distinguish users. | 2 years | https://www.google.com/analytics/learn/privacy.html |
| _gaexp | .citypass.com | Google Optimize | Used to determine a user's inclusion in an experiment and the expiry of experiments a user has been included in. | Depends on the length of the experiment but typically 90 days. | https://www.google.com/analytics/learn/privacy.html |
| _gid | .citypass.com | Google Analytics | Used to distinguish users. | 24 hours | https://www.google.com/analytics/learn/privacy.html |
| addshoppers.com | www.citypass.com | AddShoppers | used to track social sharing for websites. | Up to 30 days | https://www.addshoppers.com/terms/ |
| amazon-pay-abtesting-new-widgets | www.citypass.com | AmazonPay | While we have no control over the cookies set by Amazon Pay, they appear to include a mixture of pieces of information to A/B test the look and feel of their widgets. | session | |
| BVBRANDID | .citypass.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user for interactions within a particular client domain. Requires client opt-in. | 1 year | |
| BVImplmain_site | www.citypass.com | Bazaarvoice | ratings and reviews | session | |
| cybbaEmailInput | www.citypass.com | Cybba | is the user email and is used for billing and analytics purposes. | 30 days | http://cybba.com/about/legal/ |
| cybsessionID | www.citypass.com | Cybba | A unique identifier for the user session and is used to track the user on the site. | 30 days | http://cybba.com/about/legal/ |
| optimizelyBuckets | .citypass.com | Optimizely | Records the Optimizely Classic variation that the visitor has seen for each experiment. This allows us to deliver a consistent experience on successive page loads. | 6 months | |
| optimizelyEndUserId | .citypass.com | Optimizely | Stores a visitor's unique Optimizely identifier, for both Optimizely Classic and Optimizely X | 6 months | |
| optimizelySegments | .citypass.com | Optimizely | Persists the visitor's Optimizely Classic segments: browser, campaign, mobile, source type, and any custom dimensions that you may have configured. This allows us to ensure persistence of segment membership, which improves the accuracy of segmented results. | 6 months | |
| r1wa_first_visit | .citypass.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | up to 2 years | |
| r1wa_session | .citypass.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | up to 2 years | |
| RT | .citypass.com | Soasta mPulse | Used for tracking page load times with Soasta. The `RT` cookie contains various pieces of information about the user’s session, as viewed by Boomerang. | 7 days |
2. Marketing and Third-Party Cookies & Similar Technologies
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies over which we have no control. These cookies are likely to be analytical, performance cookies, or targeting cookies.
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access our websites at all or certain parts of them.
The following are cookies set by third-party services installed on citypass.com. While partners may vary their cookie names over time, specific third-party cookies can include, for example:
| Name | Domain | Source | Use | Expiration | Third-Party Privacy Policies |
| cw_id | .addthis.com | AddThis | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 27 days | http://www.addthis.com/privacy |
| uid | .addthis.com | AddThis | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 27 days | http://www.addthis.com/privacy |
| pdv | .addthis.com | AddThis | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 27 days | http://www.addthis.com/privacy |
| sess | .adnxs.com | AppNexus | The sess cookie from AppNexus contains a single non-unique value: `1`. It is used by the Platform to test whether a browser is configured to accept cookies from AppNexus. | unspecified | https://www.appnexus.com/en/company/platform-privacy-policy |
| anj | .adnxs.com | AppNexus | The anj cookie from AppNexus contains data denoting whether a cookie ID is synced with their partners. ID syncing enables our partners to use their data from outside the Platform on the Platform. | 3 months | https://www.appnexus.com/en/company/platform-privacy-policy |
| __cfduid | .citypass.net | cloudflare | The __cfduid cookie is used to identify individual clients behind a shared IP address and apply security settings on a per-client basis. | 1 year | |
| demdex | .demdex.net | Adobe | Audience Manager sets this cookie to assign a unique ID to a site visitor.The demdex cookie helps Audience Manger perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc. | 180 days | |
| cjae | .dotomi.com | CJ Affiliate by Conversant | Marketing | 1 year | https://www.conversantmedia.com/legal/privacy |
| CJsession | .dotomi.com | CJ Affiliate by Conversant | Marketing | session | https://www.conversantmedia.com/legal/privacy |
| DotomiUser | .dotomi.com | CJ Affiliate by Conversant | Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. | 1 year | https://www.conversantmedia.com/legal/privacy |
| IDE | .doubleclick.net | One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. | sesson to 2 years | https://policies.google.com/privacy | |
| fr | .facebook.com | Facebook tracking cookie | 90 days | ||
| 1P_JAR | .google.com | Google used to collect website statistics and track conversion rates. | session to 2 years | https://policies.google.com/privacy | |
| APISID | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. | session to 2 years | https://policies.google.com/privacy |
| HSID | .google.com | Google Maps | Google uses security cookies to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorized parties. For example, Google uses cookies called ‘SID’ and ‘HSID’ which contain digitally signed and encrypted records of a user’s Google account ID and most recent sign-in time. The combination of these two cookies allows us to block many types of attack, such as attempts to steal the content of forms that you complete on web pages. | session to 2 years | https://policies.google.com/privacy |
| NID | .google.com | Google Maps | Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser’s ads or search results, and your visits to an advertiser’s website. This helps us to show you customized ads on Google. | session to 2 years | https://policies.google.com/privacy |
| OGPC | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. | session to 2 years | https://policies.google.com/privacy |
| OTZ | .google.com | Aggregate analysis of website visitors | session to 2 years | https://policies.google.com/privacy | |
| SID | .google.com | Google Analytics | Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser’s ads or search results, and your visits to an advertiser’s website. This helps us to show you customized ads on Google. | session to 2 years | https://policies.google.com/privacy |
| SIDCC | .google.com | Google Analytics | Security cookie to protect users data from unauthorized access | session to 2 years | https://policies.google.com/privacy |
| SSID | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. | session to 2 years | https://policies.google.com/privacy |
| AID | .googleadservices.com | link your activity across devices on which you have previously signed in to your Google account. This is done to coordinate the ads shown to you on different devices and to measure conversion events. | session to 2 years | https://policies.google.com/privacy | |
| ra1_pd | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days | |
| ra1_pd_1991308694 | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days | |
| ra1_sgm | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days | |
| ra1_sid | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days | |
| RA1balancer | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days | |
| BVID | .network.bazaarvoice.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user for interactions across the BV network. Requires client opt-in. | 365 days | https://www.bazaarvoice.com/legal/privacy-policy/ |
| BVSID | .network.bazaarvoice.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user browsing session for interactions across the BV network. Requires client opt-in. | 30 minutes | https://www.bazaarvoice.com/legal/privacy-policy/ |
| post_dcm | .po.st | po.st | RadiumOne provides the po.st link shortening service. They also make use of cookies to record information about the website or content you have chosen to share. This information is used to identify the intersts of users who share Post links and users who click on these links in order to deliver targeted advertising. | 1 year | |
| post_uuid | .po.st | po.st | Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 1 year | |
| _dc_gtm_UA-XXXXXX-1 | Google Tag Manager | Used to throttle request rate when Google Analytics is deployed via Google Tag Manager | 1 minute | https://support.google.com/dfp_premium/answer/2839090?hl=en | |
| _gat_UA-XXXXXX-1 | Google Tag Manager | Used to throttle request rate when Google Analytics is deployed via Google Tag Manager | 1 minute | https://support.google.com/dfp_premium/answer/2839090?hl=en |