Cookie Policy
Version 1.8 · Effective 21 October 2026 · Operated by Dutch Aviation Services Sp. z o.o. (90-369 Łódź, Poland)
This Cookie Policy explains how FlyInPoland uses cookies and similar tracking technologies on flyinpoland.com.
1. What is a cookie
A cookie is a small text file that a website stores on your device when you visit, so the site can recognise your browser on a return visit, remember preferences, or measure usage. "Cookie" in this Policy also covers similar technologies such as local-storage entries, pixel tags, and device fingerprints.
2. What is set without asking for your consent
These are set or stored when a page loads, whatever you choose in the cookie banner. The purpose of each one is given in the table.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
fip_consent (browser local storage) | Fly in Poland | Records the separate analytics and advertising choices, when they were made, and the purpose/configuration version, so only a current choice is applied | Until you change your choice or clear your site data |
__cf_bm | Cloudflare | Protects the website and forms against automated abuse | 30 minutes |
msgsndr_id | Avantwerk (our website platform) | Visitor identifier set by our website platform when a page first loads, so that the platform can recognise the same browser on a later visit; it is sent to the platform operator with the visit statistics and attribution listed below | 12 months |
| Visit statistics and attribution entries (browser local storage) | Avantwerk (our website platform) | Written by our website platform on every page when it loads, before any choice and whatever you choose: visit-history, session and first-visit entries (v2_history, v2_session_history, v2_contact_session ... session_id, v3_first_session_event). The platform uses them for its visit statistics and attribution: the pages opened, the referring address, campaign parameters and a session identifier are sent to the platform operator together with the visitor identifier | Until you clear your site data |
| Form session entries (browser local storage of the form frame) | Avantwerk (our website platform) | On pages that show an enquiry form, the form frame keeps a form session identifier, a browser fingerprint value and a history of the session | Until you clear your site data |
cf.turnstile.u (browser local storage of the security-check frame) | Cloudflare | Used by the automated-abuse check that protects the enquiry form | Until you clear your site data |
Every page carries a preconnect hint to Google's font server, added by our website platform. The pages themselves use fonts served from our own website, but the hint still makes your browser look up and open a connection to Google, which discloses your IP address.
The blog pages (the blog index and the articles) are an exception to the fonts served from our own website: when you open one, it loads its typefaces from Bunny Fonts, a font service operated in the European Union, before any cookie choice, so your browser connects to it and sends your IP address and browser details. It sets no cookie for this.
Pages that show our enquiry form load it in a frame supplied by our website platform. That frame downloads its typefaces from Bunny Fonts, a font service operated in the European Union, so when the form is displayed your browser connects to it and sends your IP address and browser details, before any cookie choice. It sets no cookie for this. The same frame loads two script files from Google's file-storage service (storage.googleapis.com) before any cookie choice, so your browser also connects to Google, which discloses your IP address; no cookie was observed for this. The same frame runs Cloudflare's automated-abuse check to protect the form.
On every page, when it loads and before any choice, our website platform sends its operator a page-view record (the address of the page and the visitor identifier) and a session record (source, referrer, keyword, campaign and address parameters). This is the platform's own visit statistics and attribution; the entries it stores for this are listed in the table above.
Every page also loads a small performance-measurement script from Cloudflare, the network that delivers the website; it is added by that network, not by this website, and it stores no cookie on your device.
Access to or storage of information on your device requires prior information and consent under Article 399(1) of the Act of 12 July 2024 - Prawo komunikacji elektronicznej (Dz.U. 2024 poz. 1221), unless the limited exception in Article 399(3)(2) applies. Analytics and advertising technologies are used only with your consent, as set out in section 3.
3. Optional technologies - only with your consent
Each of these loads only after the corresponding consent. Google Analytics (Google Ireland Limited) measures how the website is used and loads only if you accept analytics cookies; the Meta Pixel entries load only if you accept advertising cookies.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_GJK0TH0MJ2 | Google Ireland Limited (Google Analytics) | Set by Google Analytics, only after you accept analytics cookies. Measures visits and how the website is used, so we can improve it | 13 months |
_fbp | Meta Platforms Ireland Limited (Meta Pixel) | Set by the Meta Pixel, only after you accept advertising cookies and only where the Pixel is active on this website. Identifies your browser so that Meta can measure and improve our advertising on Facebook and Instagram, including showing our adverts to people who have visited the website | 3 months |
_fbc | Meta Platforms Ireland Limited (Meta Pixel) | Set by the Meta Pixel under the same conditions, when you arrive on the website from one of our adverts on Facebook or Instagram. Stores the click identifier of that advert so the visit can be attributed to it | 90 days |
lastExternalReferrer, lastExternalReferrerTime (browser local storage) | Meta Platforms Ireland Limited (Meta Pixel) | Written to this website's local storage after you accept advertising cookies. They record the last external address that referred your browser to the website and when, for advertising measurement | Until you withdraw your choice or clear your site data |
The Meta Pixel is used on this website only after you choose to accept advertising cookies; without that choice it is not loaded and sets no cookie. When you successfully submit an enquiry form, the Pixel also sends Meta a "Lead" event, which tells Meta that an enquiry was made from your browser; it is sent only if you have accepted advertising cookies, and we do not send Meta the contents of the form. For the collection of data through the Meta Pixel and its transmission to Meta, we and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR. Their arrangement is Meta's Controller Addendum, available at https://www.facebook.com/legal/controller_addendum: we are responsible for informing you and obtaining your consent, and Meta is responsible for enabling your rights under Articles 15 to 20 GDPR for the data it stores afterwards. Meta's further processing is described in Meta's Privacy Policy at https://www.facebook.com/about/privacy. You may exercise your rights against Meta directly or write to us at [email protected]. The legal basis is your consent under Article 6(1)(a) GDPR, and Meta may process the data in the United States, as described in our Privacy Policy.
Accept all enables analytics and advertising; Essential only enables neither; Manage choices controls them separately. Adding an analytics or advertising identifier changes the purpose/configuration version, so a choice made before it was added cannot activate it.
4. Managing your cookies
You can control cookies through your browser settings (block all, block third-party, delete on close). Disabling strictly-necessary cookies may affect site functionality (for example, the contact form may not submit correctly).
Major browser controls:
5. Consent withdrawal
Use the persistent Cookie settings control on any page to change or withdraw a choice. On withdrawal, the website revokes the consent given to the Meta Pixel, deletes the _fbp and _fbc cookies, the lastExternalReferrer and lastExternalReferrerTime local-storage entries and any Google Analytics cookie whose name begins with _ga, and reloads the page. Withdrawal does not remove what our website platform stores on every page whatever you choose: the visitor identifier and the visit statistics and attribution entries listed in section 2. You can delete those, and any other storage, in your browser settings.
6. Contact
Questions about cookies: [email protected].
7. Changes to this Policy
Version 1.8, effective 21 October 2026. This version states that the blog pages load their typefaces from Bunny Fonts. Version 1.7, effective 14 October 2026, added Google Analytics, used only after analytics consent. The Policy lists what our website platform stores when a page loads, describes the fonts and automated-abuse check loaded by the enquiry-form frame, and sets out how the Meta Pixel is used after advertising consent, including the joint-controller arrangement with Meta.