Cookie Policy
Last updated: October 2026
What Are Cookies
Cookies are small text files that a website stores in your browser. Websites can also keep small amounts of data in your browser's local storage (kept until you clear it) and session storage (deleted when you close the tab). The same rules apply to all of these, so this policy lists them together. Our mobile apps do not use cookies; see section 12 of our Privacy Policy.
What We Use
Necessary items keep the site working, keep you signed in, protect it against abuse and make payments possible. Preference items remember choices you made. Both are set without asking, because the site cannot work as you asked without them. Analytics cookies are set only if you accept them. We show no advertising and use no advertising or marketing cookies.
- gibs_cookie_consentLocal storage
Remembers your cookie choice, so we don't ask again on every page.
- Provider
- Greek Island Buses
- Lifetime
- Until you clear your browser data
- Category
- Necessary
- refresh_tokenCookie
Keeps you signed in to your account. Sent only to our sign-in service and not readable by scripts on the page.
- Provider
- Greek Island Buses
- Lifetime
- 30 days
- Category
- Necessary
- gibs_userLocal storage
Your name and email, so the site can show that you are signed in. Removed when you sign out.
- Provider
- Greek Island Buses
- Lifetime
- Until you sign out
- Category
- Necessary
- partner_refresh_tokenCookie
Keeps partner businesses signed in to the partner portal. Sent only to the portal's sign-in service and not readable by scripts on the page.
- Provider
- Greek Island Buses
- Lifetime
- 30 days
- Category
- Necessary
- gibs_session_id, gibs_ref, gibs_purchase_sent, gibs:qr-scan:*, ms_oauth_state, ms_code_verifier, ms_redirect_uri, ms_return_urlSession storage
Values for the current visit only: a random visit identifier, the partner that referred you (so they can be credited), checks that stop a purchase or QR-code scan being counted twice, and security values used while you sign in with Microsoft.
- Provider
- Greek Island Buses
- Lifetime
- Until you close the tab
- Category
- Necessary
- gibs_langLocal storage
Remembers the language you chose.
- Provider
- Greek Island Buses
- Lifetime
- Until you clear your browser data
- Category
- Preference
- gibs_app_banner_dismissedLocal storage
Remembers that you closed the banner suggesting our mobile app.
- Provider
- Greek Island Buses
- Lifetime
- Until you clear your browser data
- Category
- Preference
- gibs_partner_tour_seenLocal storage
Remembers that a partner has already seen the partner portal's welcome tour.
- Provider
- Greek Island Buses
- Lifetime
- Until you clear your browser data
- Category
- Preference
- cf_clearanceCookie
Shows that your browser has passed Cloudflare's security check, including the Turnstile check on our contact form, so you are not checked again.
- Provider
- Cloudflare
- Lifetime
- 1 year
- Category
- Necessary
- Cloudflare Web AnalyticsScript, stores nothing
Counts page views and measures how fast pages load. Sets no cookies, stores nothing in your browser and does not identify you.
- Provider
- Cloudflare
- Lifetime
- —
- Category
- None (no cookies)
- __stripe_midCookie
Fraud prevention for card payments. Set only when you open the checkout page.
- Provider
- Stripe
- Lifetime
- 1 year
- Category
- Necessary
- __stripe_sidCookie
Fraud prevention for the current checkout. Set only when you open the checkout page.
- Provider
- Stripe
- Lifetime
- 30 minutes
- Category
- Necessary
- mCookie
Fraud prevention, set on Stripe's own domain. Only when you open the checkout page.
- Provider
- Stripe (m.stripe.com)
- Lifetime
- 2 years*
- Category
- Necessary
- _gaCookie
Google Analytics 4 (loaded through Google Tag Manager): tells visits apart so we can count unique visitors. Set only after you accept analytics.
- Provider
- Lifetime
- 2 years*
- Category
- Analytics (only with your consent)
- _ga_RGBMVK1KGYCookie
Google Analytics 4: keeps track of the current session. Set only after you accept analytics.
- Provider
- Lifetime
- 2 years*
- Category
- Analytics (only with your consent)
| Name | Provider | Purpose | Lifetime | Category |
|---|---|---|---|---|
| gibs_cookie_consentLocal storage | Greek Island Buses | Remembers your cookie choice, so we don't ask again on every page. | Until you clear your browser data | Necessary |
| refresh_tokenCookie | Greek Island Buses | Keeps you signed in to your account. Sent only to our sign-in service and not readable by scripts on the page. | 30 days | Necessary |
| gibs_userLocal storage | Greek Island Buses | Your name and email, so the site can show that you are signed in. Removed when you sign out. | Until you sign out | Necessary |
| partner_refresh_tokenCookie | Greek Island Buses | Keeps partner businesses signed in to the partner portal. Sent only to the portal's sign-in service and not readable by scripts on the page. | 30 days | Necessary |
| gibs_session_id, gibs_ref, gibs_purchase_sent, gibs:qr-scan:*, ms_oauth_state, ms_code_verifier, ms_redirect_uri, ms_return_urlSession storage | Greek Island Buses | Values for the current visit only: a random visit identifier, the partner that referred you (so they can be credited), checks that stop a purchase or QR-code scan being counted twice, and security values used while you sign in with Microsoft. | Until you close the tab | Necessary |
| gibs_langLocal storage | Greek Island Buses | Remembers the language you chose. | Until you clear your browser data | Preference |
| gibs_app_banner_dismissedLocal storage | Greek Island Buses | Remembers that you closed the banner suggesting our mobile app. | Until you clear your browser data | Preference |
| gibs_partner_tour_seenLocal storage | Greek Island Buses | Remembers that a partner has already seen the partner portal's welcome tour. | Until you clear your browser data | Preference |
| cf_clearanceCookie | Cloudflare | Shows that your browser has passed Cloudflare's security check, including the Turnstile check on our contact form, so you are not checked again. | 1 year | Necessary |
| Cloudflare Web AnalyticsScript, stores nothing | Cloudflare | Counts page views and measures how fast pages load. Sets no cookies, stores nothing in your browser and does not identify you. | — | None (no cookies) |
| __stripe_midCookie | Stripe | Fraud prevention for card payments. Set only when you open the checkout page. | 1 year | Necessary |
| __stripe_sidCookie | Stripe | Fraud prevention for the current checkout. Set only when you open the checkout page. | 30 minutes | Necessary |
| mCookie | Stripe (m.stripe.com) | Fraud prevention, set on Stripe's own domain. Only when you open the checkout page. | 2 years* | Necessary |
| _gaCookie | Google Analytics 4 (loaded through Google Tag Manager): tells visits apart so we can count unique visitors. Set only after you accept analytics. | 2 years* | Analytics (only with your consent) | |
| _ga_RGBMVK1KGYCookie | Google Analytics 4: keeps track of the current session. Set only after you accept analytics. | 2 years* | Analytics (only with your consent) |
* The provider sets these for 2 years, but current browsers limit cookies to about 13 months (400 days).
Managing Your Preferences
You can change your choice at any time with “Cookie settings” at the bottom of every page. If you withdraw consent for analytics, we delete the Google Analytics cookies and reload the page. You can also delete cookies and site data in your browser settings; necessary items are then set again when needed, and we ask for your choice again.
Questions
If you have questions about cookies, email [email protected]. How we process personal data in general is explained in our Privacy Policy.