Cookies
Notice version: 2026-10 · FSP, d.o.o.
Cookies are small text files that a website stores in your browser. On iFly.si we use necessary cookies, without which the site does not work, and — only with your consent — cookies for visit statistics and the Google tag that measures the performance of our ads on Google. We show no ads on the site; there are no other third-party trackers.
Legal basis: for necessary cookies Article 225 of the Electronic Communications Act (ZEKom-2), which does not require consent; for analytics and advertising cookies your consent, which you can withdraw at any time. You allow or refuse each category separately.
Cookie settings
Here you can change or withdraw your consent at any time. Withdrawal stops further loading of the statistics or the Google tag and removes their cookies from your browser.
Login, form security, language, basket, remembered decision.
Current status: —
Essential cookies (no consent required)
| First name | Purpose | Duration | Set by |
|---|---|---|---|
sessionid | Session: login to your user account, the booking/enrolment process, language and security protections. | 14 days | FSP, d.o.o. |
csrftoken | Security token that protects forms against forged requests (CSRF). | 1 year | FSP, d.o.o. |
django_language | The selected site language (Slovenian/English), if you switch it manually. | until the browser is closed | FSP, d.o.o. |
oscar_open_basket | Basket of a customer who is not logged in (gift vouchers, shop). | 7 days | FSP, d.o.o. |
messages | Short notice after an action (e.g. "booking received") until it is displayed. | until displayed | FSP, d.o.o. |
ifly_2fa_trust | Staff only: remembers the device after confirmation with an SMS code when entering the administration. | 30 days | FSP, d.o.o. |
iflyCookieConsent (localStorage) | Your cookie decision (notice version, yes/no for analytics and advertising, time). No identifying data. | until deleted in the browser | FSP, d.o.o. |
__stripe_mid, __stripe_sid | Only on the payment page, inside Stripe's payment window: fraud prevention for card payments. Stripe is the payment processor; without these, payment is not possible. | 1 year / 30 minutes | Stripe Payments Europe, Ltd. |
Analytics cookies (only with consent)
Visitor statistics are measured by Matomo, installed on our server — the data does not leave FSP and is not passed on to third parties. Without consent the script is not loaded at all and these cookies are not created.
| First name | Purpose | Duration | Set by |
|---|---|---|---|
_pk_id.* | Random visitor identifier for counting returning visits. | 13 months | FSP, d.o.o. (Matomo) |
_pk_ses.* | Current visit (session) for counting page views. | 30 minutes | FSP, d.o.o. (Matomo) |
_pk_ref.* | Visit source (where you came from), if known. | 6 months | FSP, d.o.o. (Matomo) |
Advertising cookies (only with consent)
We advertise our school on Google. With your consent the Google tag (gtag.js, Google Ireland Ltd.) is loaded; it tells Google that a visit after an ad click led to a registration, course sign-up, booking or payment. That is how we know whether the ads pay off. There are no ads on the site and your data is not used for personalised advertising (Google signals are off). Without consent the tag is not loaded and Google receives nothing. Google may transfer data to the USA; the transfer is based on the EU–US Data Privacy Framework and standard contractual clauses. More at policies.google.com/technologies/ads.
| First name | Purpose | Duration | Set by |
|---|---|---|---|
_gcl_au | Random identifier linking an ad click with a later sign-up or purchase on this site. | 90 days | Google Ireland Ltd. |
_gcl_aw, _gcl_gb | Click identifier (GCLID) when you arrive via a Google ad. | 90 days | Google Ireland Ltd. |
What we do not use
- There is no Google analytics, Meta pixel or other third-party tracker. The Google tag for measuring ads is loaded only with your advertising consent.
- There are no ads on the site and no profiling for personalised advertising.
- Libraries needed for the site to work (htmx, Alpine.js, Swiper, flatpickr) are loaded from public CDN servers; they do not set cookies, but they do receive your IP address when the file is loaded.
- On the payment page, Stripe's script (js.stripe.com) is loaded, which is essential for secure payment.
How to delete cookies in your browser
You can delete or block cookies at any time in your browser settings (Chrome, Safari, Firefox, Edge: settings → privacy → cookies). If you block essential cookies, login and purchases will not work.
More about the processing of personal data: Privacy policy.