COOKIE POLICY

COOKIE POLICY

Last updated: 13 October 2026

This Cookie Policy explains how the Vexere e-commerce trading platform (comprising Vexere’s website and mobile application), being a suite of Services, Products and technology Solutions serving needs relating to travel, transportation and other journey support Services (the “Platform”), uses Cookies and similar technologies when you access, register an account with or use the Services on the Platform; the types of Cookies used by Vexere and the purposes of their use; and how you can manage, allow, refuse or delete Cookies.

Vexere uses non-essential Cookies only with your consent. You may consent to, refuse or adjust your choices through the relevant Cookie management mechanism on the website or mobile application in accordance with Section 7 of this Policy. Essential Cookies continue to be used to ensure the normal operation of the Platform.

This Cookie Policy forms an integral part of, and is always attached to, the Personal Data Protection Policy published on Vexere’s Platform.

1. Consent

For non-essential Cookies involving the processing of Personal Data on the basis of consent, Vexere collects your consent through the relevant management mechanisms on the Platform. You may make and change your choices for each category or each purpose of Cookie use as provided in this Policy.

For purposes of a different nature, Vexere collects separate consent for each relevant category or purpose.

Your silence, non-response, closing of the Cookie notice or continued use of the Platform shall not be deemed consent to non-essential Cookies.

Vexere uses essential Cookies only to the extent strictly necessary for the secure operation of the Platform or for the provision of the functions or Services you request, on an appropriate legal basis under personal data protection laws. Where the law requires consent for a specific processing activity relating to essential Cookies, Vexere will collect your consent accordingly.

All use, storage, sharing and processing of Data collected through Cookies shall be carried out in accordance with this Policy, the Personal Data Protection Policy and applicable personal data protection laws.

2. Cookies and Similar Technologies

Cookies are data files stored on your browser or device that support identification and authentication, remember the options and settings you have selected, analyze traffic and usage trends on the Platform, measure the effectiveness of advertising and marketing activities, and personalize content and advertisements according to your interests. Information collected through Cookies also helps Vexere improve the interface, optimize your experience and enhance the quality of the Services on the Platform.

Information collected through Cookies and similar technologies constitutes personal data only where such information is associated with a specific individual or helps identify a specific individual, including where it is combined with other information such as online identifiers, device identifiers or user identifiers. Certain data tracking online behavior and service usage activities may constitute sensitive personal data under applicable laws. Accordingly, Vexere uses each category of non-essential Cookies for a specific purpose only with your consent, according to the classification in Section 4.

In addition to Cookies, Vexere and its Partners and Providers may use other similar technologies, collectively referred to as “Cookies” in this Cookie Policy, including:

Web beacons, pixel tags, tags and scripts: small pieces of code that help measure visits, the effectiveness of advertising/marketing campaigns and interactions with emails or pages.
Software development kits (SDKs): integrated into mobile applications and functioning similarly to Cookies to collect information about your interactions with the application.
Local storage objects (local storage, HTML5): support the storage of state, preferences or session information on your browser or device.
Device/advertising identifiers: identifiers associated with a device or browser (e.g., device identifiers and advertising identifiers provided by the operating system) that support device recognition and measurement on the Platform.

3. Why Does Vexere Use Cookies?

Vexere uses Cookies for the following general purposes:

Essential Cookies: to operate the Platform and ensure that core functions operate stably and securely.
Performance Cookies: to measure and analyze traffic and usage behavior in order to understand which pages are useful, detect errors and improve the quality of the Platform.
Personalization Cookies: to remember preferences and settings and to personalize content and recommend more relevant trips and services.
Advertising and Marketing Measurement Cookies: to measure the effectiveness of marketing and advertising activities, attribute referral sources and support the display of relevant advertising content on Vexere’s Platform or on advertising partners’ channels.

Each of the purposes above corresponds to the Cookie category stated in brackets. For consent-based purposes, Vexere collects separate consent for each relevant category or purpose in accordance with Sections 4 and 7.

4. Cookie Categories by Specific Purpose

Vexere classifies Cookies into four (04) categories according to their purpose of use. Essential Cookies are always enabled to ensure the operation of the Platform; non-essential Cookie categories are optional, disabled by default and used only with your consent.

Performance Cookies: displayed as “Improve App Experience” or “Performance Cookies”, these Cookies help Vexere measure and analyze how you use the Platform, identify useful features or content, detect errors and improve features, performance and user experience. Certain data used for behavioral analysis purposes may be considered sensitive personal data by law. This Cookie category operates only with your consent.
Personalization Cookies: displayed as “Personalized Suggestions” or “Personalization Cookies”, these Cookies help Vexere remember and analyze your choices, preferences or how you interact with the Platform in order to recommend trips, services or content more relevant to you. This Cookie category operates only with your consent.
Advertising Cookies: displayed as “Offer Notifications” or “Advertising Cookies”, these Cookies support Vexere in delivering and measuring the effectiveness of offers, promotions and marketing activities, attributing referral sources, and supporting the display of relevant advertising content on the channels of Vexere or its advertising partners. Certain data used for these activities may be considered sensitive personal data by law. This Cookie category operates only with your consent.

When you are not logged in, non-essential Cookies are managed by category as set out above through the Cookie notice and the Cookie Preferences panel. When you are logged in on the website or application, or have made your choices at the booking step, management is carried out by purpose of use under the “Privacy and Data” section, as described in Section 7.

5. Detailed List of Cookies on the Platform

The table below lists the main Cookies used by Vexere, together with their lifespan on the browser/device and their purposes. The list may change over time in line with upgrades to the Platform. When the list changes, Vexere will update this Policy and proceed in accordance with Section 8.

The lifespan on the browser/device is the maximum period for which a Cookie is stored on your browser or device from the time it is set; “Session” means that the Cookie will be deleted when you close your browser. This lifespan is not the same as the retention period of data generated by such Cookie or similar technology on Vexere’s systems or the provider’s systems. The retention period of personal data is governed by the Personal Data Protection Policy and the law.

5.1. For Users Not Logged In to a Platform Account

Cookie Name	Lifespan on Browser/Device	Purpose
Essential Cookies
couponInfo_*	30 minutes	Records the discount code applied to the order during the booking process
*:isDeleted	15 minutes	Manages and maintains the status of draft orders
uncompletedSignup:*	400 days	Preserves the status of an incomplete sign-up to help complete login
SAPISID	400 days	Authenticates security requests and Google account sessions
HSID	400 days	Authenticates users and prevents unauthorized access to Google accounts
SID	400 days	Maintains the login session status of Google accounts
SIDCC	400 days	Protects the account and the integrity of Google login sessions
SSID	400 days	Secures and authenticates Google account information
APISID	400 days	Authenticates and maintains connections to Google services
AEC	6 months	Performs anti-spam and anti-fraud checks and verifies valid Google requests
__Secure-1PSID	400 days	Protects Google account login sessions
__Secure-1PSIDCC	400 days	Secures login sessions and prevents abuse of Google services
__Secure-1PSIDTS	400 days	Monitors the security status of Google login sessions
__Secure-3PSIDCC	400 days	Protects Google cross-site login sessions
__Secure-3PSIDTS	400 days	Maintains the security status of Google cross-site sessions
__Secure-STRP	400 days	Protects login sessions and prevents fraud on Google services
Performance Cookies
_vxrid	400 days	Identifies users/devices for Vexere’s internal behavioral measurement.
visited_payment_method_page_*	400 days	Tracks visits to the payment page for conversion funnel measurement.
gtm_*	Session	Manages and fires measurement tags via Google Tag Manager.
_ga	400 days	Distinguishes users/browsers on Google Analytics.
_ga_4CCX580KEF	400 days	Maintains sessions and measures events on Google Analytics 4.
_gid	24 hours	Distinguishes users over a short-term cycle on Google Analytics.
gbuuid	400 days	Identifies devices/users for measurement and statistical purposes.
Personalization Cookies
national	400 days	Stores the user’s country/language preference at login.
*_indexPosition	1 hour	Restores the scroll position/searched trip card on the route page.
isSurveySatisfaction	6 hours	Records survey completion status so that the survey is not displayed again.
Advertising Cookies
cto_bundle	13 months	Supports Criteo’s retargeting and delivery of personalized advertising
__Secure-1PAPISID	400 days	Builds an interest profile for the delivery of Google’s personalized advertising
__Secure-3PAPISID	400 days	Personalizes advertising on Google’s third-party services
__Secure-3PSID	400 days	Identifies users across sites for Google ad targeting
NID	6 months	Stores user preferences and displays Google’s personalized advertising
.VXR.AffiliateParams	24 hours	Records the referring partner (affiliate) for order reconciliation
__stat	13 months	Smartech – Tracks marketing campaign metrics and behavior
__stbpenable	13 months	Smartech – Flag confirming the on/off status of Web Push Notifications
__stdf	13 months	Smartech – Stores user attribute/segment data
__stgeo	13 months	Smartech – Stores geolocation information for message personalization
_stp	13 months	Smartech – Identifies user profiles for Marketing Automation campaigns
_sts	Session	Smartech – Stores marketing activity session information
_fbp	90 days	Measures conversions and supports retargeting on Facebook
_gcl_au	90 days	Measures conversion performance of Google Ads campaigns
_ttp	13 months	Identifies browsers to measure and optimize TikTok advertising
_tt_enable_cookie	13 months	Confirms the on/off status of TikTok’s data collection cookie
ttcsid	Session	TikTok Events – Groups tracking events within the same session

5.2. For Users Logged In to a Platform Account

Cookie Name	Lifespan on Browser/Device	Purpose
Essential Cookies
accessToken	1 hour	Maintains the user session and authenticates user login
couponInfo_*	30 minutes	Records the discount code applied to the order during the booking process
*:isDeleted	15 minutes	Manages and maintains the status of draft orders
uncompletedSignup:*	400 days	Preserves the status of an incomplete sign-up to help complete login
SAPISID	400 days	Authenticates security requests and Google account sessions
HSID	400 days	Authenticates users and prevents unauthorized access to Google accounts
SID	400 days	Maintains the login session status of Google accounts
SIDCC	400 days	Protects the account and the integrity of Google login sessions
SSID	400 days	Secures and authenticates Google account information
APISID	400 days	Authenticates and maintains connections to Google services
AEC	6 months	Performs anti-spam and anti-fraud checks and verifies valid Google requests
__Secure-1PSID	400 days	Protects Google account login sessions
__Secure-1PSIDCC	400 days	Secures login sessions and prevents abuse of Google services
__Secure-1PSIDTS	400 days	Monitors the security status of Google login sessions
__Secure-3PSIDCC	400 days	Protects Google cross-site login sessions
__Secure-3PSIDTS	400 days	Maintains the security status of Google cross-site sessions
__Secure-STRP	400 days	Protects login sessions and prevents fraud on Google services
__Host-1PLSID	400 days	Maintains Google Accounts login sessions (host-scoped)
__Host-3PLSID	400 days	Supports Google Accounts cross-site login sessions
__Host-GAPS	400 days	Secures sessions and authenticates Google Accounts
LSID	400 days	Maintains login sessions for Google Accounts services
g_state	Session/400 days	Stores the display state of the Google Sign-In/One Tap interface
Performance Cookies
_vxrid	400 days	Identifies users/devices for Vexere’s internal behavioral measurement.
visited_payment_method_page_*	400 days	Tracks visits to the payment page for conversion funnel measurement.
gtm_*	Session	Manages and fires measurement tags via Google Tag Manager.
_ga	400 days	Distinguishes users/browsers on Google Analytics.
_ga_4CCX580KEF	400 days	Maintains sessions and measures events on Google Analytics 4.
_gid	24 hours	Distinguishes users over a short-term cycle on Google Analytics.
gbuuid	400 days	Identifies devices/users for measurement and statistical purposes.
Personalization Cookies
national	400 days	Stores the user’s country/language preference at login.
*_indexPosition	1 hour	Restores the scroll position/searched trip card on the route page.
isSurveySatisfaction	6 hours	Records survey completion status so that the survey is not displayed again.
ACCOUNT_CHOOSER	400 days	Remembers the list of Google accounts to suggest quick sign-in.
Advertising Cookies
cto_bundle	13 months	Supports Criteo’s retargeting and delivery of personalized advertising
__Secure-1PAPISID	400 days	Builds an interest profile for the delivery of Google’s personalized advertising
__Secure-3PAPISID	400 days	Personalizes advertising on Google’s third-party services
__Secure-3PSID	400 days	Identifies users across sites for Google ad targeting
NID	6 months	Stores user preferences and displays Google’s personalized advertising
.VXR.AffiliateParams	24 hours	Records the referring partner (affiliate) for order reconciliation
__stat	13 months	Smartech – Tracks marketing campaign metrics and behavior
__stbpenable	13 months	Smartech – Flag confirming the on/off status of Web Push Notifications
__stdf	13 months	Smartech – Stores user attribute/segment data
__stgeo	13 months	Smartech – Stores geolocation information for message personalization
_stp	13 months	Smartech – Identifies user profiles for Marketing Automation campaigns
_sts	Session	Smartech – Stores marketing activity session information
_fbp	90 days	Measures conversions and supports retargeting on Facebook
_gcl_au	90 days	Measures conversion performance of Google Ads campaigns
_ttp	13 months	Identifies browsers to measure and optimize TikTok advertising
_tt_enable_cookie	13 months	Confirms the on/off status of TikTok’s data collection cookie
ttcsid	Session	TikTok Events – Groups tracking events within the same session

6. Third-Party Providers and Data Processing outside Vietnam

Certain Cookies and similar technologies on the Platform are set or provided by third-party providers, including Google (Google Analytics, Google Tag Manager, Google Ads, Google Sign-In), Meta (Meta Pixel), TikTok (TikTok Pixel/Events), Criteo and Netcore (Smartech), as listed in Section 5. Information collected through these technologies may be processed by the relevant provider under its agreement with Vexere and/or under that provider’s privacy policy. Vexere activates third-party technologies in non-essential categories only with your consent to the relevant category.

Some of the above providers may store or process data on systems located outside the territory of Vietnam. Where personal data is transferred abroad, Vexere shall perform its obligations under personal data protection laws, including preparing and maintaining a cross-border personal data transfer impact assessment dossier where required by law.

7. How to Manage, Allow, Refuse or Delete Cookies

Essential Cookies are always used to the extent necessary to ensure the normal operation of the Platform and to provide core functions. For non-essential Cookies and similar technologies, you may allow, refuse or change your choices through the relevant management mechanisms provided by Vexere.

7.1. For Users Not Logged In

When you are not logged in, Vexere provides mechanisms for you to manage the use of non-essential Cookies and similar technologies depending on your status of use of the Platform.

Where Vexere has not yet recorded your Cookie choices, the Platform may display a notice and/or a Cookie management panel for you to make choices on the use of non-essential Cookies. Essential Cookies are always enabled to the extent necessary and cannot be disabled through the Cookie management tool.

In the Cookie notice, you may:

Select “Accept All” to consent to the use of all non-essential Cookie categories, including Performance Cookies, Personalization Cookies and Advertising and Marketing Measurement Cookies;
Select “Reject” to refuse all non-essential Cookies, in which case only essential Cookies will be used;
Select “Cookie Preferences” to enable or disable each non-essential Cookie category individually, and then confirm using the “Save Choices” function.

In the Cookie Preferences panel, non-essential Cookie categories remain disabled until you actively enable them or select “Accept All”. Third-party tags, pixels, scripts and tools in these categories are activated only after you have given your consent.

If you close the Cookie notice using the “X” button without making a choice, such action shall not be deemed consent to any non-essential Cookie category. Non-essential Cookie categories shall remain in a non-consented state.

Vexere may record that the notice has been closed in order to manage the display of the notice, but such recording shall not be deemed consent to non-essential Cookies.

Where you are not logged in but have made a booking and made choices regarding data processing at the booking step, the relevant choices may be managed through the corresponding data management mechanism provided by Vexere.

7.2. For Logged-In Users

When you are logged in, you may view and manage your choices relating to non-essential Cookies and similar technologies through the “Privacy and Data” section and/or “Cookie Preferences” provided by Vexere on the Platform.

Options by purpose of use may include:

Offer Notifications: allows Vexere to send information on relevant offers, promotions and marketing activities, and to use the technologies necessary to send such notifications and measure their effectiveness. This option does not automatically include tracking or the display of advertisements on advertising partners’ channels;
Personalized Suggestions: allows the use of Cookies and similar technologies to analyze and remember your preferences in order to recommend trips, services or content more relevant to you;
Improve Experience: allows the use of Cookies and similar technologies to measure and analyze how you use the Platform, detect errors and improve features, performance and user experience;
Advertising and Marketing Measurement: allows the use of Cookies and similar technologies to measure campaign effectiveness, attribute referral sources and support advertising activities on Vexere or on advertising partners’ channels, if this function is deployed.

When you enable an option, the Cookies and similar technologies serving the relevant purpose may be activated. When you disable that option, data processing shall be carried out in accordance with Section 7.3 below.

You may review and change your choices at any time through the privacy management mechanism provided by Vexere. Withdrawal of consent is designed to be as simple as giving consent.

Refusing non-essential Cookies and similar technologies does not interrupt your ability to book tickets or use the core functions of the Platform. However, certain personalized content, recommendations, notifications or measurement functions may be limited.

When you enable an option, the Cookies and similar technologies serving the relevant purpose may be activated. When you disable that option, Vexere will stop using the Cookies and similar technologies within the scope of that choice to collect further information.

You may review and change these choices at any time through “Cookie Preferences” on the website or the corresponding options in the mobile application.

Refusing non-essential Cookies does not interrupt your ability to book tickets or use the core functions of the Platform. However, certain personalized content, recommendations, notifications or measurement functions may be limited.

7.3. Withdrawal of Consent

You may withdraw your consent to each Cookie category or each purpose of use at any time by changing or disabling the relevant option.

When you withdraw consent, Vexere will cease processing personal data based on the withdrawn consent for the relevant purpose, unless the law permits continued processing on another legal basis, specifically:
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal;
Vexere will stop activating or using the Cookies and similar technologies within the withdrawn scope for the relevant purpose and will not continue to use data previously collected for the withdrawn purpose, unless there is another legal basis;
Data collected before the withdrawal is not automatically deleted in all cases. The continued retention, deletion or destruction of data shall be carried out in accordance with the Personal Data Protection Policy and applicable laws. You may exercise your right to request data deletion under the Personal Data Protection Policy;
Cookies previously set may remain on your browser or device until they expire or are deleted, but Vexere will not continue to use such Cookies for the purpose for which you have withdrawn consent, unless otherwise permitted by law.

7.4. Managing Cookies through Your Browser

To help you block new Cookies, receive notifications of new Cookies or disable Cookies, vexere.com provides links to the “Help” sections of some of the most popular browsers as follows:

8. Amendments and Updates to this Policy

Vexere may amend or update this Cookie Policy from time to time to reflect changes in practice, technology or laws. When this Policy is updated, Vexere will revise the “Last updated” date at the top of this Policy and publish the latest version on the Platform. Where the update changes the purpose or scope of data processing for which the law requires your consent, Vexere will notify you and collect your additional consent in accordance with applicable laws.

9. Contact Vexere

If you have any questions or requests relating to this Cookie Policy, please contact Vexere:

Office address: Vexere – 2nd Floor, CirCO Hoang Dieu, H3 Building, Khanh Hoi Ward, Ho Chi Minh City, Vietnam.
Hotline: 1900 969681.
Email: [email protected].

Tin tức sự kiện