Cookies Disclosures
1. Internal Cookies & Similar Technologies Used on citypass.com
The following are first-party cookies used on CityPASS properties including international subdomains.
| Name and Address | Domain | Source | Use | Expiration |
|---|---|---|---|---|
| cp_cookies_accepted | *.citypass.com | CityPASS | Used to track if cookie notice has been accepted. | 1 year |
| cp_across | *.citypass.com | CityPASS | Used to track the cart object(s) between checkout and receipt page | session |
| cp_last_product_added | *.citypass.com | CityPASS | Used to track the last product added to the cart | 30 days |
| cp_logged_in | *.citypass.com | CityPASS | Tracks if a user is logged-in to the Interchange admin (including wholesalers) | 12 hours |
| cp_pp_shipmeth | *.citypass.com | CityPASS | Tracks if the PayPal payment method was selected | session |
| cp_pp_token | *.citypass.com | CityPASS | Tracks a paypal token for that payment method | session |
| cp_redirected | *.citypass.com | CityPASS | Tracks if a user was redirected to another translated locale (e.g. de.citypass.com) | session |
| cp_src_log_override | *.citypass.com | CityPASS | Used to help track the affiliate marketing source | session |
| cp_src_obj | *.citypass.com | CityPASS | Used to track promo discounts, including for logged-in wholesalers | 12 hours |
| cp_step | *.citypass.com | CityPASS | Tracks which cart step the user was on most recently | session |
| cp_when | *.citypass.com | CityPASS | Tracks which version of a product the customer viewed last. Either the `now` or `next` version, when a new program is available for purchase. | session |
| cp_geo | *.citypass.com | CityPASS | Tracks if geo country lookup has occurred. | session |
| cp_add_to_cart | *.citypass.com | CityPASS | Used to add products to cart on checkout | session |
| cpaddcart | *.citypass.com | CityPASS | legacy cart cookie, it is a relic | session |
| cpnumunits | *.citypass.com | CityPASS | Tracks the number of items added in the cart | 30 days |
| mv_source | *.citypass.com | CityPASS | mv_source functionality is meant to record which affiliate should be given credit for an order. | 3 months |
| cp_mini_cart | *.citypass.com | CityPASS | Used to track whether the `mini cart` summary was already displayed to a given user in the current session. | session |
| myCity | .citypass.com | CityPASS | Used with the CityPASS `Travel Guide` progressive web app. Uses localStorage, which persists across sessions. This tracks the city purchased on citypass.com. | none |
| MV_SESSION_ID | .citypass.com | CityPASS | Tracks a customer's session | session |
| cjevent | .citypass.com | CityPASS | Used in affiliate tracking | 3 months |
| _ga | .citypass.com | Google Analytics | Google Analytics (including related advertising services). Used to distinguish users. Third-Party Privacy Policies:https://www.google.com/analytics/learn/privacy.html | 2 years |
| _gaexp | .citypass.com | Google Optimize | Used to determine a user's inclusion in an experiment and the expiry of experiments a user has been included in. Third-Party Privacy Policies:https://www.google.com/analytics/learn/privacy.html | Depends on the length of the experiment but typically 90 days. |
| _gid | .citypass.com | Google Analytics | Used to distinguish users. Third-Party Privacy Policies:https://www.google.com/analytics/learn/privacy.html | 24 hours |
| cp_cart_items | *.citypass.com | CityPASS | Used to track the items that exist in the shopping cart | 30 days |
| amazon-pay-abtesting-new-widgets | www.citypass.com | AmazonPay | While we have no control over the cookies set by Amazon Pay, they appear to include a mixture of pieces of information to A/B test the look and feel of their widgets. | session |
| BVBRANDID | .citypass.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user for interactions within a particular client domain. Requires client opt-in. | 1 year |
| BVImplmain_site | www.citypass.com | Bazaarvoice | ratings and reviews | session |
| cybbaEmailInput | www.citypass.com | Cybba | is the user email and is used for billing and analytics purposes. Third-Party Privacy Policies:http://cybba.com/about/legal/ | 30 days |
| cybsessionID | www.citypass.com | Cybba | A unique identifier for the user session and is used to track the user on the site. Third-Party Privacy Policies:http://cybba.com/about/legal/ | 30 days |
| r1wa_first_visit | .citypass.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | up to 2 years |
| r1wa_session | .citypass.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | up to 2 years |
| fs_uid | .citypass.com | FullStory | Used to track visitor sessions. Third-Party Privacy Policies:https://www.fullstory.com/legal/privacy | session |
| shareasaleSSCID | .citypass.com | ShareASale | Used to improve tracking accuracy. Third-Party Privacy Policies:https://www.shareasale.com/PrivacyPolicy.pdf | unspecified |
| cp_cart_return | *.citypass.com | CityPASS | Used to distinguish whether or not users should see the `return to cart` message | 60 seconds |
| RT | .citypass.com | Soasta mPulse | Used for tracking page load times with Soasta. The `RT` cookie contains various pieces of information about the user’s session, as viewed by Boomerang. | 7 days |
| _hp2_id.1485668980 | *.citypass.com | CityPASS | User cookie (stores user_id, identity, other ids). | 13 months |
| _hp2_ses_props.1485668980 | *.citypass.com | CityPASS | Session properties cookie (stores timestamp and cookie domain/path). | 30 minutes |
| _hp2_props.1485668980 | *.citypass.com | CityPASS | Event properties cookie (stores properties set by addEventProperties API). | 13 months |
| _hp2_hld.* | *.citypass.com | CityPASS | Used to determine which domain a cookie can be set on (since public suffix domains block setting cookies on the top level). | Should not persist |
| cp_checkout_data | *.citypass.com | CityPASS | cart object | none |
| cp_close_remind_me | *.citypass.com | CityPASS | This cookie was used as part of an A/B test in 2016, it is a relic | session |
| cp_currency | *.citypass.com | CityPASS | Used to track the currency setting (e.g. USD, CAD, GBP, Euros) | 30 days |
| cp_del | *.citypass.com | CityPASS | Used to track the delivery method selected during checkout | session |
| cp_language | *.citypass.com | CityPASS | Used to track the language setting preference for a customer (e.g. English, Spanish, French, Spanish) | session |
2. Marketing and Third-Party Cookies & Similar Technologies
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies over which we have no control. These cookies are likely to be analytical, performance cookies, or targeting cookies.
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access our websites at all or certain parts of them.
The following are cookies set by third-party services installed on citypass.com. While partners may vary their cookie names over time, specific third-party cookies can include, for example:
| Name and Address | Domain | Source | Use | Expiration |
|---|---|---|---|---|
| cw_id, uid, pdv, loc, mus, na_id, ouid, uvc | .addthis.com | AddThis | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:http://www.addthis.com/privacy | 27 days |
| IDE | .doubleclick.net | One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. Third-Party Privacy Policies:https://policies.google.com/privacy | sesson to 2 years | |
| fr | .facebook.com | Facebook tracking cookie | 90 days | |
| 1P_JAR | .google.com | Google used to collect website statistics and track conversion rates. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years | |
| APISID | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| HSID | .google.com | Google Maps | Google uses security cookies to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorized parties. For example, Google uses cookies called ‘SID’ and ‘HSID’ which contain digitally signed and encrypted records of a user’s Google account ID and most recent sign-in time. The combination of these two cookies allows us to block many types of attack, such as attempts to steal the content of forms that you complete on web pages. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| NID | .google.com | Google Maps | Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser’s ads or search results, and your visits to an advertiser’s website. This helps us to show you customized ads on Google. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| OGPC | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| OTZ | .google.com | Aggregate analysis of website visitors Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years | |
| SID | .google.com | Google Analytics | Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser’s ads or search results, and your visits to an advertiser’s website. This helps us to show you customized ads on Google. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| SIDCC | .google.com | Google Analytics | Security cookie to protect users data from unauthorized access Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| SSID | .google.com | Google Maps | Google set a number of cookies on any page that includes a google map. While we have no control over the cookies set by google, they appear to include a mixture of pieces of information to measure the number and behavior of google maps users. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years |
| AID | .googleadservices.com | link your activity across devices on which you have previously signed in to your Google account. This is done to coordinate the ads shown to you on different devices and to measure conversion events. Third-Party Privacy Policies:https://policies.google.com/privacy | session to 2 years | |
| ra1_pd | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days |
| ra1_pd_1991308694 | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days |
| ra1_sgm | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days |
| ra1_sid | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days |
| RA1balancer | .gwallet.com | RhythmOne | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. | 350 days |
| BVID | .network.bazaarvoice.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user for interactions across the BV network. Requires client opt-in. Third-Party Privacy Policies:https://www.bazaarvoice.com/legal/privacy-policy/ | 365 days |
| BVSID | .network.bazaarvoice.com | Bazaarvoice | Allows internal BV web analytics to be correlated to the same user browsing session for interactions across the BV network. Requires client opt-in. Third-Party Privacy Policies:https://www.bazaarvoice.com/legal/privacy-policy/ | 30 minutes |
| post_dcm | .po.st | po.st | RadiumOne provides the po.st link shortening service. They also make use of cookies to record information about the website or content you have chosen to share. This information is used to identify the intersts of users who share Post links and users who click on these links in order to deliver targeted advertising. | 1 year |
| sess | .adnxs.com | AppNexus | The sess cookie from AppNexus contains a single non-unique value: `1`. It is used by the Platform to test whether a browser is configured to accept cookies from AppNexus. Third-Party Privacy Policies:https://www.appnexus.com/en/company/platform-privacy-policy | unspecified |
| post_uuid | .po.st | po.st | Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network. | 1 year |
| _dc_gtm_UA-XXXXXX-1 | Google Tag Manager | Used to throttle request rate when Google Analytics is deployed via Google Tag Manager Third-Party Privacy Policies:https://support.google.com/dfp_premium/answer/2839090?hl=en | 1 minute | |
| _gat_UA-XXXXXX-1 | Google Tag Manager | Used to throttle request rate when Google Analytics is deployed via Google Tag Manager Third-Party Privacy Policies:https://support.google.com/dfp_premium/answer/2839090?hl=en | 1 minute | |
| uid | .simpli.fi | Simpli.fi | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://simpli.fi/site-privacy-policy/ | 1 year |
| uid_syncd | .simpli.fi | Simpli.fi | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://simpli.fi/site-privacy-policy/ | 3 days |
| clid | .media6degrees.com | Dstillery | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://dstillery.com/privacy-policy/ | 6 months |
| acs | .media6degrees.com | Dstillery | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://dstillery.com/privacy-policy/ | 6 months |
| JSESSIONID | .media6degrees.com | Dstillery | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://dstillery.com/privacy-policy/ | session |
| sglst | .media6degrees.com | Dstillery | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://dstillery.com/privacy-policy/ | 6 months |
| _adroll, _adroll_v4, _adroll_fpc, _adroll_consent_paramas, _adroll_post_consent_html, _adroll_post_connsent_css | .nextroll.com, .adroll.com | AdRoll | These cookies are used to show you advertising messages that are more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and selecting advertisements that are based on your interests. Third-Party Privacy Policies:https://www.nextroll.com/privacy | 30 days - 13 months |
| anj | .adnxs.com | AppNexus | The anj cookie from AppNexus contains data denoting whether a cookie ID is synced with their partners. ID syncing enables our partners to use their data from outside the Platform on the Platform. Third-Party Privacy Policies:https://www.appnexus.com/en/company/platform-privacy-policy | 3 months |
| __cfduid | .citypass.net | cloudflare | The __cfduid cookie is used to identify individual clients behind a shared IP address and apply security settings on a per-client basis. | 1 year |
| demdex | .demdex.net | Adobe | Audience Manager sets this cookie to assign a unique ID to a site visitor.The demdex cookie helps Audience Manger perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc. | 180 days |
| cjae | .dotomi.com | CJ Affiliate by Conversant | Marketing Third-Party Privacy Policies:https://www.conversantmedia.com/legal/privacy | 1 year |
| CJsession | .dotomi.com | CJ Affiliate by Conversant | Marketing Third-Party Privacy Policies:https://www.conversantmedia.com/legal/privacy | session |
| DotomiUser | .dotomi.com | CJ Affiliate by Conversant | Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads. Third-Party Privacy Policies:https://www.conversantmedia.com/legal/privacy | 1 year |