Cookie Policy

Short version: we use Cloudflare security cookies (mandatory), privacy-first server-side analytics (no client cookies), and the Google Ads conversion tag for measuring ad effectiveness. The Google Ads tag runs in EU Consent Mode v2 with all advertising and analytics storage denied by default until you grant consent — your visits contribute to conversion measurement via modeled signals rather than personal identifiers.

1. What are cookies?

A cookie is a small text file stored by your browser when you visit a website. Cookies can be used to remember preferences, keep you logged in, track behavior across sites, or measure traffic.

2. What cookies we use

Strictly necessary (we use these)

These cookies are essential for the website to function and cannot be disabled without breaking the site:

• __cf_bm (Cloudflare Bot Management) — distinguishes humans from bots. Lifetime: 30 minutes. Set by our hosting provider Cloudflare.
• cf_clearance (Cloudflare) — proves your browser passed Cloudflare's security check. Lifetime: 1 year.

These cookies do not track you, do not contain personal data, and do not identify you across websites. They are set by Cloudflare under our security configuration.

Analytics (we use these, privacy-first)

We use Cloudflare Analytics Engine for traffic and conversion measurement. It runs server-side at the Cloudflare edge, does not set client cookies, does not store personally identifiable information, and does not track you across sessions.

Marketing / advertising (used with Consent Mode)

We use the Google Ads conversion tag (gtag.js) to measure the effectiveness of our paid advertising. It loads on every page but is configured with Consent Mode v2 default denied, meaning:

• ad_storage, ad_user_data, ad_personalization, analytics_storage are all denied by default — no advertising or analytics cookies are written without your consent.
• Google receives cookieless, anonymized pings used to model conversion volumes — no individual user identifiers.
• ads_data_redaction is enabled, which redacts ad-click identifiers and IP address from outgoing pings.

We do not use:

• Facebook Pixel or Meta tracking
• TikTok or LinkedIn tracking pixels
• Affiliate tracking cookies
• Cross-site retargeting pixels

3. Third-party services

When you click external links (e.g., our WhatsApp number, social media links, the official Egyptian visa portal), the destination website may set its own cookies under its own policy. We have no control over those.

4. How to manage cookies

You can disable cookies in your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Block all cookies
• Edge: Settings → Cookies and site permissions

Note: blocking the Cloudflare security cookies may cause our website to display a CAPTCHA challenge on each visit, or block access entirely if Cloudflare's bot detection flags you.

5. Changes to this policy

If we add new cookies (for example, if we add a comment system or live chat), we will update this page and notify users via a cookie banner.

6. Contact

Questions about cookies or this policy: info@ohyestours.com