What’s on your device
Signed out, nothing on this page reaches us. An account adds two cookies and the choice to sync; Cloudflare’s bot check may add one of its own, which we cannot read. Cookies were never the whole story though, so here is everything else.
things kept on this device when you are signed out, and not one of them reaches us
more once you sign in, and only then — the two cookies, and syncing if you choose it
Plenty of sites say “we only use essential cookies”. Signed out — which is how almost everyone reads this site — we use none at all, and nothing below leaves your device. Sign in and that changes in exactly two ways: two cookies keep you signed in, and anything you choose to sync is kept in your account. On an ordinary account we hold the key to it, so we could read it if we went looking — and one step on your account page locks it so we cannot. The rule that matters covers everything kept on your device, and a cookie is only one way of doing that. So here is the whole list.
Deletes everything below, the saved pages included. The site keeps working. You’ll be asked where you’re flying from again, and your ticked items go. If you were syncing, your account keeps its copy and this device stops syncing — deleting the account’s copy is a different decision, made on your account page.
| What it is called | What it is for | On your device now |
|---|---|---|
| gttg-theme | Remembers whether you asked for the light or dark version | |
| gttg-from | Remembers where you’re travelling from, so distances mean something | |
| gttg-checks | Keeps your packing checklist ticked between visits | |
| gttg-list | How you last left the country list: the month, the price bands, which kinds of month you asked for, the region and the order | |
| gttg-saved | The countries you saved, so the list is still yours next time | |
| gttg-days | The trips you put into the day counter, so it can still answer the question next week | |
| gttg-ccy | Exists only if you change the currency prices are shown in. Otherwise the site reads your device’s own language setting, decides from that, and stores nothing | |
| gttg-units | Exists only if you change between kilometres and miles. Otherwise the site reads your device’s own language setting, decides from that, and stores nothing | |
| gttg-temp | Exists only if you change between Celsius and Fahrenheit. Otherwise the site reads your device’s own language setting, decides from that, and stores nothing | |
| gttg-liked | Exists only if you type an afternoon temperature into “Closest to” when ordering a list. One number. There is no default and we never guess it: what counts as a good afternoon is yours to say, not ours, which is why the box starts empty | |
| gttg-datefmt | Exists only if you change which way round dates are written. Otherwise the site reads your device’s own language setting, decides from that, and stores nothing | |
| gttg-offline | Exists only if you turn OFF keeping pages for offline use. It is how we remember not to start again the next time you open the site | |
| gttg-trip-draft | Exists only if you press “Make this my trip” on the planner without being signed in. It is the trip itself, kept on this device until you sign in and move it into your account — or delete it | |
| saved pages | Every page you open is kept, so the site still works when your signal does not. This is the largest thing here by far, and until August 2026 this table did not admit it existed | |
| gttg-sync | Only if you sync. Where this device and your account left off last time they spoke, so the next sync can merge changes rather than overwrite them | |
| gttg-keys | Only if you sync. The key that lets this device open what your account holds — stored so it can be used but never read out, by us or by anything else. Clearing it pauses syncing on this device until you unlock again | |
| gttg_session | Only while you are signed in: the cookie that keeps you signed in on this device. It is the one thing here this page cannot clear — signing out is its clear button | |
| gttg_csrf | Only while you are signed in: its twin, which exists to prove that requests really came from our pages and not someone else’s | |
| gttg-no | Exists only if you press the second button below. It is how we remember that you said no | |
| cf_clearance | Exists only if Cloudflare’s bot protection has checked this browser. It is not ours — Cloudflare sets it, and it records that this device already passed the check, so you are not asked again. We cannot read it and it tells us nothing about you. It is the price of keeping automated abuse off a site that lets people upload documents | |
| gttg-stats | Exists only if you answer the note about counting visits — “ok” if you said that was fine, “no” if you told us not to. If it says no, the counting script is never fetched again on any page, so nothing is sent and there is nothing to trust us about. Clearing this row forgets your answer, and the note comes back |
Take it with you
Without an account — how this site began, and still how it works until you choose otherwise — nothing above is sent to us. It all lives on this device and nowhere else, so a new phone or a cleared browser loses it. Save it to a file and you can load it back wherever you like. The file is yours and it goes nowhere near us.
An account changes where things live. Sign in and say yes to syncing, and your saved countries, ticks and trips follow you to your other devices. Whether we can read them is your choice and it starts as ours: an ordinary account is the easy kind, where we hold the key so that signing in is all you ever have to do — which means we could read your saved things if we went looking. One step on your account page changes that: choose a passphrase and the key is locked with it here, on your device, and from then on we cannot read them at all. Either way we can see the names of what you sync — that an account has saved countries — and with the locked kind, never which ones. The privacy notice says all of this properly.
Only the rows showing Stored above go into the file, so if something is missing from it, it was never kept rather than lost. Loading adds the file's items to this device and leaves anything else here alone, which means an older file can never wipe something newer. You are shown what is in the file before anything happens. There is a text option beside each button because phones differ in how they handle downloads, and copying and pasting works everywhere that saving a file does not.
Or tell us to stop altogether
Clearing is a tidy-up. It empties what is here now, and the site may start storing again on your next visit, because you have not told it not to. This is the other thing, and it sticks.
The law that lets us keep preferences and saved pages without asking first also requires clear information about what they are for, and a simple way to object. The table is the information. The second button is the objection, and unlike clearing it lasts until you change it. Neither has a confirmation step, because nothing here is precious enough to justify one.
What isn’t here
The more interesting half of the list, and every line of it is true today rather than aspirational:
- No account needed. There is one if you want your things on more than one device, and the whole site works exactly the same without it.
- No analytics. Not a privacy-friendly one either. None.
- No advertising identifiers, no ad networks, and nothing here is chosen, ordered or paid for by an advertiser. One affiliate programme earns us a commission on links labelled “Ad” at the link itself — the whole of it is on one page.
- No email list. An account has your address, for signing in and for the confirmation and reset emails you ask for — and nothing else. There is no newsletter to be added to.
- No session recording, no heatmaps, no fingerprinting.
- No videos or social media widgets, and nothing embeds by itself — the map on a country page loads only after you press its button, because an embed that loads up front hands your details to that company before you have asked for anything.
One thing can leave your device for somebody else, and we would rather be exact than reassuring: pressing either map button on a country page connects your browser to Google Maps, which discloses your IP address to Google. Nothing else goes with it, and leaving the map buttons alone means no other company is contacted at all. The exchange rates used to be a second one; since August 2026 they come with the page instead.
One thing does now leave your device without being asked, and it comes to us. A country page fetches a live forecast as it loads. It goes to our own server, never to the weather service — we ask them on your behalf and cache the answer for half an hour, so the Norwegian Meteorological Institute never sees you. The cost of that honesty: our server gets one request naming the country you are reading. It already knew, having just sent you the page. If you would rather nothing was fetched at all, the button below that stops this site storing anything also stops this.
More on what does and doesn’t leave your device is on the privacy page.