Cookies Policy

What Are Cookies and Similar Technologies?

Cookies are small text files that a website stores on your device. Similar technologies include browser storage (localStorage and sessionStorage) and tracking pixels — small pieces of code from an advertising partner that report what happens on a page. In this policy, "cookies" covers all of them.

Why We Use Them and on What Legal Basis

• Essential cookies and storage — needed to provide the Platform and the services you ask for: keeping you signed in, remembering your language, completing a booking and payment, and remembering your cookie choice. We use them because they are necessary to provide the service you request; they cannot be switched off.
• Advertising cookies and pixels — used to measure how our advertising performs and to show relevant SightScape ads on our partners' platforms. We use them on the basis of your consent. They are on by default: when you first visit, we show you a notice, and by continuing to use the Platform without changing your settings you agree to them. You can withdraw that consent at any time, as easily as it was given (see "Managing Your Choices").

Essential Cookies and Storage

These are set by us, on our own domain, and are not used for advertising:

• auth_token (cookie) — keeps you securely signed in. It cannot be read by scripts on the page. Lasts 30 days, or until you sign out.
• ts.locale and NEXT_LOCALE (cookies) — remember whether you chose Arabic or English. Last up to 1 year.
• ss_marketing_consent (cookie) — remembers your cookie choice (notice seen, allowed, or switched off) so we respect it on every visit. Lasts 180 days.
• ts.auth (browser storage) — your basic profile details (such as your name) so the signed-in pages display correctly. It does not contain your password or sign-in token. Kept until you sign out or clear your browser data.
• ts.checkout (browser session storage) — your in-progress booking: the experience, date, guests, contact details you entered and payment step. Deleted when you close the browser tab.
• ss.auth.returnPath (browser storage) — the page to bring you back to after signing in with an email link. Deleted as soon as it is used.
• ts.reels.sound and ts.reels.swipeHintSeen (browser storage) — remember whether you muted video reels and whether you have seen the swipe hint. Kept until you clear your browser data.
• ss.purchase.reported (browser storage) — the reference numbers of your most recent bookings (up to 50) that have already been counted, so a purchase is never reported twice. Kept until you clear your browser data.

Advertising Cookies and Pixels

The following advertising partners' pixels load on the Platform unless you switch advertising cookies off. They record the pages you view and actions such as viewing an experience, starting a booking and completing a purchase (including the booking value, the experience and the booking reference), together with technical information such as your IP address, browser type and device.

• Meta (Facebook and Instagram) — Meta Pixel. Sets cookies such as _fbp and _fbc. We also keep the Meta ad click identifier (ss.meta.fbclid, browser storage) for 90 days.
• Snap Inc. (Snapchat) — Snap Pixel. Sets cookies such as _scid. We also keep the Snapchat ad click identifier (ss.snap.click_id, browser storage) for 28 days.
• TikTok — TikTok Pixel. Sets cookies such as _ttp. We also keep the TikTok ad click identifier (ss.tiktok.ttclid, browser storage) for 28 days.
• OpenAI (ChatGPT ads) — OpenAI Ads Measurement Pixel. Sets __oppref (the ChatGPT ad click reference, 30 days) and __obref (a browser reference, 365 days). We also keep a copy of the click reference (ss.openai.oppref, browser storage) for 30 days.
• Google LLC — Google Analytics, which measures how the Platform is used (pages viewed, searches and the booking steps above). Sets cookies such as _ga and _ga_<id>. It loads together with the pixels above, so switching advertising cookies off stops it too.

Cookies set by a partner are controlled by that partner, including how long they last. Please see each partner's own privacy and cookie policy for details.

Information We Share Directly With Advertising Partners

In addition to the pixels, when you complete a booking or create an account and advertising cookies are on, our servers send the same event directly to Meta, Snapchat, TikTok and OpenAI. This makes our measurement more accurate (for example when a browser blocks the pixel) and lets each partner match the booking to the ad you saw. This copy includes:

• your email address and phone number (and, for Snapchat, your name), in hashed form — converted into an irreversible code before it leaves our systems, so it is not sent in readable form;
• the booking value and currency, the experience booked, and the booking reference;
• your IP address, browser information, and the ad click identifiers described above.

If you switch advertising cookies off, we stop sending this information for your future bookings and sign-ups.

Other Service Providers

• Payments — card, mada and Apple Pay payments are taken through HyperPay's secure payment form, shown on our checkout page. Other payment options (such as Tamara) take you to the provider's own pages. Each payment provider uses its own cookies under its own policies, only to process and secure your payment.
• Maps — the map on an experience page is loaded from the OpenFreeMap map service, which receives your IP address to deliver the map images. It does not set cookies.
• Site performance and security — our hosting and security provider, Cloudflare, protects the Platform and measures overall site performance.

Transfer of Data Outside the Kingdom

Our advertising partners (Meta, Snapchat, TikTok and OpenAI), Google (Google Analytics) and some of our service providers are based outside the Kingdom of Saudi Arabia, and information collected through cookies and shared with them may be processed outside the Kingdom, including in the United States. We transfer only the information needed for the purposes described in this policy, in accordance with the Personal Data Protection Law and its regulations on transfers outside the Kingdom.

Managing Your Choices

• Cookie notice — the first page you open shows a notice that advertising cookies are on. Closing it, or moving to another page, keeps that setting. Choose "Change preferences" in the notice to switch them off.
• Manage cookies — you can change your choice at any time using "Manage cookies" in the page footer. Switching advertising cookies off takes effect immediately: the pixels stop loading and we stop sharing your information with advertising partners from then on. It does not limit any feature of the Platform.
• Browser settings — you can also delete or block cookies in your browser settings. Blocking essential cookies may stop parts of the Platform (such as signing in or booking) from working.
• Partner settings — Meta, Snapchat, TikTok and OpenAI also offer ad preference settings in your accounts with them.

Switching advertising cookies off does not delete information already collected before you changed your choice. To ask for that, contact us (see "Your Rights").

Your Rights

Under the Personal Data Protection Law you have the right to be informed about how your personal data is processed, to access and obtain a copy of it, to have it corrected, to request its destruction where it is no longer needed, and to withdraw your consent at any time. To exercise these rights, contact us at [email protected]; we will respond within the period required by law. If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA).

Changes to This Policy

We may update this Cookies Policy from time to time — for example when we add or remove a technology or partner. The "Last updated" date at the top shows the current version.

Contact Us

Questions about this policy or our use of cookies? Contact us at [email protected] or through the Contact Us page on the Platform.