Cookie Policy
Last updated: October 1, 2026
Related: Privacy Policy, Terms of Service
1. What Are Cookies
Small text files stored on your device when you visit a website. Sites can also keep data in your browser's local storage. This page covers both.
2. Cookies We Use
| Cookie | Provider | Purpose | Duration | Required |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Bot management | 30 min | Yes |
| cf_clearance | Cloudflare | Challenge passage | 1 year | Yes |
| _ga, _ga_* | Google Analytics | Analytics | Up to 2 years | Only if you accept |
Our own analytics (PostHog, section 3) sets no cookies at all. No advertising, marketing, or social media cookies.
Other things kept in your browser
These stay on your device, are never sent to us as tracking data, and exist only if you use the feature:
ir-analytics-consent: your Accept or Decline choice on the bannerir:my-roads:v1: F-roads you chose to follow (your saved roads)icelandroads-aurora-dismissed: that you closed the aurora bannertripPassSessionand trip drafts: lets you resume a Trip Pass you started
3. Our Analytics (PostHog)
We use PostHog, hosted in PostHog's EU region, to see which pages and features are useful. The analytics requests go through our own domain (icelandroads.com/ingest) rather than to a third-party address.
Nothing is stored on your device. PostHog runs in memory only: no cookie, no local storage, no session storage. It uses a random ID that lives only while the page is open, so a new visit, or even a reload, looks like a new anonymous visitor. We cannot recognise you from one visit to the next, and we never link analytics to your name or email.
What is collected:
- Pages you view and when you leave them
- Clicks on the page (which element, its text and link address, and where on the screen), including clicks on partner links such as car rental offers and Dream Travel Iceland
- When a partner box scrolls into view, when a map fails to load, and steps in the Trip Pass checkout
- Page-speed measurements (Core Web Vitals)
- Technical details: browser, operating system, device type, screen size, the site that linked you here, and an approximate location (country or city) that PostHog works out from your IP address
What is not collected: no session recordings, no text you type into forms, no names or email addresses. Private links (for example a Trip Pass manage link or an unsubscribe link) carry a secret in the address; we remove those parts of the address before anything is sent.
4. The Consent Banner
- Accept loads Google Analytics (with IP anonymisation), which sets the
_gacookies above - Decline means Google Analytics never loads and sets no cookies. The site works exactly the same
- The banner does not switch PostHog on or off. PostHog stores nothing on your device and cannot recognise you across visits, so it runs for everyone
- Your choice is saved in your browser (
ir-analytics-consent). Change it any time with the "Cookie settings" link in the footer - Strictly necessary cookies (Cloudflare security) load automatically and need no consent
5. Managing Cookies
Our settings: the footer link "Cookie settings" reopens the banner so you can switch Google Analytics on or off. If you accepted earlier and now decline, Google Analytics stops; you can delete any existing _ga cookies in your browser settings.
Browser controls: all browsers let you block or delete cookies and site data. Blocking Cloudflare's cookies may cause extra security checks.
Blocking PostHog: a content blocker that blocks requests to /ingest stops it entirely. Everything on the site still works.
6. Third-Party Processors
| Processor | Cookies | Purpose | DPA |
|---|---|---|---|
| Cloudflare | __cf_bm, cf_clearance | Hosting and security | Yes |
| PostHog (EU region) | None (in memory only) | Analytics | Yes |
| Google Analytics | _ga, _ga_* (only if you accept) | Analytics | Google's terms |
PostHog stores our analytics data in its EU region. Google Analytics data may be processed outside the EU/EEA.
7. Do Not Track
Do Not Track and Global Privacy Control signals do not currently change how the site behaves. PostHog stores nothing on your device either way, and Google Analytics only runs if you press Accept.
8. Contact
Data Controller: Stefán Freyr Margrétarson
Email: alerts@icelandroads.com