Cookie Policy
Last updated: 2 October 2026
Greece 365 sets no cookies of its own. Every booking link on the site is an already-tracked affiliate link that loads nothing when you follow it. The one part of the site that can set a third-party cookie is the flight search on the homepage, which loads straight away whether or not you accept the notice below — a search box you have to agree to first would not be a search box. Everything else here is either stored on your own device or sent to a third party named in full below.
1. Cookies set by this site: none
The site's own server never sends a Set-Cookie header. What the Travelpayouts flight search does is listed separately in section 3, because it happens without asking, whatever you answer on the notice.
2. Local storage on your device
Two small values are kept in your browser's local storage. They are not cookies, are not sent anywhere unless you do something that requires them, and can be removed at any time by clearing site data for this domain.
| Name | Why it exists | Sent to a server? |
|---|---|---|
greece365-consent | Remembers your answer on the cookie notice so you are not asked again on every page. | No |
adminKey | Keeps the site owner signed in to the private admin panel so it does not ask for a password on every change. | Yes, only to the admin endpoints, and only for the owner |
3. Third-party services
Each service below receives a network request when you open a page, and each therefore sees your IP address at that moment. None of them build an advertising profile of you.
Cloudflare
The site is hosted on Cloudflare, which also provides security and aggregate analytics. The analytics beacon is bot-filtered and designed not to set cookies or build cross-site profiles. Cloudflare processes network data such as IP addresses as part of delivering the site, under its own privacy documentation.
YouTube
The music player is an embedded YouTube player. This is the one part of the site that can set third-party cookies, and YouTube's own privacy policy governs it. If you would rather it did not load at all, most browser privacy settings and extensions can block it — the rest of the site works without it.
OpenStreetMap
The map and its tiles are served by OpenStreetMap, as their attribution requirements oblige. Requests disclose your IP address to them. Tiles are static images; no tracking identifier is involved.
Image hosts
Destination photographs are loaded from external image servers rather than stored on this site, so each image request discloses your IP address to the host serving it. Two are used: Unsplash and Wikimedia Commons. Both serve static images and neither is an advertising network, though each publishes its own privacy policy covering the data an image request reveals.
Blocking image hosts leaves the site fully readable — only the photographs disappear.
Travelpayouts
There are two separate things here, and they behave differently.
The booking links load nothing. Every booking card on this site — the six on the homepage and the six on each destination page — is a finished tpx.lu address that already carries this site's identifier, and goes straight to getrentacar, Kiwi, Welcome Pickups, Tiqets, WeGoTrip or YesIM. No script of ours loads to make that work, and Travelpayouts is not involved until you leave. Opening a card takes you to the booking company, and only then does Travelpayouts learn of the click, as it does for any affiliate link on the internet.
The flight search on the homepage loads code immediately, for everyone. It is a Travelpayouts search form, served from trpwdg.com, covering both flights and hotels. It is requested as soon as the page loads, without waiting for an answer on the notice: the search is the point of the homepage, so it is offered before anything is agreed to. That widget sets its own cookies, and the booking sites it sends you to may set theirs. The notice below cannot switch it off — declining changes what this site itself measures, not what Travelpayouts puts in your browser when its search box loads.
If your browser sends Global Privacy Control or Do Not Track, this site's own analytics never run whatever you clicked. That is deliberate, and it is the same signal the site has always treated as a refusal for anything the notice governs.
That search form also tries to contact a few services of its own. Two are allowed so the form works properly: the suggestion service that completes airport and city names as you type, and a look-up that guesses the nearest large airport to pre-fill the departure field — for most readers in Greece that comes back as Athens, and you can always type a different one. Two error-reporting services belong to other companies and are refused outright: the site's Content Security Policy does not name them, so they never receive a request, and if you open the browser console you will see two harmless errors about requests that were blocked. The form behaves the same without them.
The current weather on each page is the other outside request, and it is the one that needs no agreement. When a page loads, this site's own server asks Open-Meteo for the temperature, humidity and wind at that destination, using coordinates printed on the page already. Your browser asks this site, not Open-Meteo, so your IP address is never disclosed to them, and no cookie, local storage or consent choice is involved. Nothing about you is sent or stored. The reading is cached for fifteen minutes. Blocking scripts stops the request entirely and the pages are otherwise unchanged.
Our own click counting is separate and much simpler: when you follow one of these links and have accepted, a single request goes to our own address saying which page and which link was followed. It sets nothing, identifies nobody, and we cannot tell who you are from it. If you decline, we do not count it either.
4. Changing your answer
Accepting is meant to be as easy to undo as it was to give. The button below changes what this browser has recorded; the label shows the answer currently stored.
One honest limitation: the button governs this site's own analytics only. Turning the choice off stops them on every page after this one and clears the flag it left; the flight search keeps loading either way, because it is not what the notice is for. Reloading this page after changing the button starts from a clean state.
5. Controlling what is stored
- To withdraw your acceptance later: clear site data for this domain in your browser's settings. The site's own analytics then stay switched off until you accept again; the flight search still loads as always.
- To clear the two local storage values: clear site data for this domain in your browser's settings.
- To block the YouTube player and third-party images: use your browser's tracking protection, or an extension that blocks third-party requests.
- To refuse analytics entirely: a content blocker set to strict will stop every optional request listed above while leaving the text of the site fully readable.
6. If this changes
This page already names every third party that receives a request, including the advertising partner described in section 3 and the two error-reporting services section 3 says are refused. If the site ever begins setting a cookie of its own, or adds another partner, this page will say so and the date at the top will change. The Privacy Policy covers the wider question of what data is held and why.