This English version is part of the information and contractual terms given to English-speaking customers. If the Hebrew and English versions differ on fees, payments, cancellation rights or other customer rights, the English version prevails for a customer who entered into the service in English.

Cookie Policy

Last updated: 8 November 2026 (usability analysis runs for all visitors, section 3)

A cookie is a small text file that a website stores in your browser. Some cookies are needed for the site to work, and some are used for measurement and advertising. This document describes the cookies and similar technologies currently used on the Site: why, for how long, and who else receives the information.

1. The principle: marketing and ad measurement only with your consent

Until you choose, we do not run any marketing or ad-measurement tool. The Facebook pixel and Google's analytics tools are not loaded at all, and no data is sent to Facebook from our server either. This is not a setting in an interface, it is how the code itself behaves.

Usability analysis runs for all visitors: the usability analysis tool (Microsoft Clarity, section 3) runs even without cookie consent. We use it to see where a screen is confusing. It is not a marketing tool, and we do not share identifiers through it for advertising. What it does not see is described in section 3.

The essential cookies run in any case, because without them you cannot open a case, enter your case page or complete a payment. There is no way to turn them off and keep using the service.

2. Essential and functional cookies

These always run, and are not used for advertising or profiling.

• fb_consent: stores your consent choice, so we do not ask on every visit. Kept in the browser for 1 year. This is the cookie our server also reads, to know whether it may send data to a third party.
• fb_admin: a sign-in cookie for the operations interface, created only for the service operator and not for visitors to the Site. httpOnly, for 30 days.
• Local browser storage (localStorage / sessionStorage), not cookies: the access key to your case page (so you do not have to verify on every visit), the source that brought you to the Site (utm) to attribute the request you send, and a one-time flag for showing the WhatsApp invitation.

3. Usability analysis, for all visitors

• Microsoft Clarity: cookies _clck and _clsk. This is a session recording tool: it records mouse movements, scrolling and clicks, so we can see where a screen is confusing and fix it. It runs for all visitors, even without cookie consent. This is what it does not do: we explicitly hide all form fields from it, in the code (name, phone, email, passenger names, verification code and the signature canvas), and it is not loaded at all on personal case pages, on the payment page or in the operations interface. If you do not want your visit recorded, you can block the address clarity.ms in your browser, or contact us using the details in the privacy policy.

4. Measurement and marketing cookies, only after consent

• Meta pixel (Facebook and Instagram): cookies _fbp (3 months at most) and _fbc (created when you arrived from an ad link). Used to measure how well ads work and to build audiences. In parallel, and only with your consent, our server sends Facebook a conversion event that includes hashed identifiers of email, phone and first name. Full details are in the privacy policy.
• Google Tag Manager (container GTM-PWMDJJLF): Google's tag manager. It does not store a cookie itself, but Google's measurement tools load through it, mainly Google Analytics 4 (cookies _ga and _ga_*, 2 years at most, to measure traffic and where visitors come from). Everything that loads through the tag manager is subject to your consent, and without consent the tag manager itself does not load at all. If we add a new non-essential measurement or advertising tool, we will update this policy and, where required, the consent choices before the tool is activated.
• Google Ads (conversion tracking, ID AW-18374673449): loaded through the tag manager, and stores the cookies _gcl_au and _gcl_aw (90 days at most). They link a click on a Google ad to an action you took on the Site, so we know which ads bring in requests and which waste money. We measure four actions this way: an eligibility check, leaving your details, opening a case and contacting us on WhatsApp.
  What we do not do: we do not use the "enhanced conversions" feature, which means we do not pass your email or phone to Google, not even in hashed form. What is passed is the action itself, the amount of our expected fee, and an internal event ID that contains no personal details. We do not build remarketing audiences through Google.

5. Where else the information is kept, and why it matters

Some third parties transfer data outside Israel, including to the United States. The legal basis for this, the types of information, the retention periods and your rights to see and delete information under the Privacy Protection Law, 5741-1981, are set out in full in the privacy policy. This document covers the cookie layer only.

6. Aggregate counting on the server, with no cookie and no identifier

In addition to the cookie layer, our server increases a counter of the number of views of each type of page per day, and separately counts visits by search engines and bots. These are aggregate statistics only: no cookie is stored, no script is loaded in the browser, and no IP address, browser fingerprint or any other identifier that could be linked to you is kept. The counter runs even if you rejected all cookies, because it contains no personal information, and we need it to know that the Site is working and how busy it is. The personal case page and the admin area are not measured at all.

7. Control from your browser

In addition to your choice on this page, you can block or delete cookies in your browser settings, and you can also browse privately. Blocking all cookies may stop you from opening a case, entering your case page or completing a payment, because these rely on the essential cookies in section 2.

8. A note on the law

Israeli law does not currently require a cookie banner in so many words. Even so, storing information about a visitor and sharing it with a third party for advertising falls within the Privacy Protection Law. In addition, visitors in certain jurisdictions, including parts of the European Economic Area, may be subject to additional privacy and electronic-communications rules concerning non-essential cookies and similar technologies. That is why all our marketing and ad-measurement tools run on an opt-in basis only. The only exception is the usability analysis tool (section 3), which runs for all visitors with every form field hidden from it. We say so here explicitly so that this document reflects the code exactly and does not promise more than is actually done.

9. Changes and contact

We will update this document if we add or remove a tool, and the date at the top of the page will show it. For questions or requests about personal information: privacy@flyback.co.il, or by post to FlyBack, 3 Totzeret Ha'aretz St., Petah Tikva, Israel. The legal entity: Itamar Avisris, Israeli VAT-registered sole proprietor, VAT ID 35994557.