Cookies
What this site stores on your device
Last written 30 August 2026
HMB Travels & Tours (Pvt) Ltd does not run advertising pixels or retargeting tags in this website’s code. Google Analytics and Microsoft Clarity are measurement tags, not ads pixels. In Europe a banner asks before those cookies are written. In Pakistan and other countries they run unless you turn them off on this page. If we add an ads pixel later, this page will say so before the tag does.
What we do use
- Google Analytics and Tag Manager. The Google tag loads on every page, immediately in the head, with Tag Manager beside it and a fallback iframe at the top of the body. Outside Europe that counts which pages were opened, roughly where, and on what kind of device, unless you turn it off here. In Europe it waits for the banner. Named steps (a WhatsApp tap, a fare search, an enquiry handoff) go to Tag Manager as a journey name and campaign tags — not your WhatsApp number. If you say no, Google may still receive a cookieless ping so the page count is not empty. We do not use it to show you ads. The packages will still load.
- Microsoft Clarity. Loaded after the page is interactive, only on public pages, and only when analytics is allowed. It records how the page is used — clicks, scroll, heatmaps, and a session replay — so we can see where the site is confusing. It does not get your name or WhatsApp number. Staff login, quote links, and /admin are not recorded. If you say no, the Clarity tag is not started.
- Staff session. Signing in at /login sets a session cookie so the CRM stays signed in. Visitors who never log in never get it.
- Cloudflare Turnstile on the fare check, when those keys are set. It is a bot check, not a marketing tracker. Cloudflare may set its own challenge cookie to remember that you passed.
- Your analytics choice, this browser. Allow or decline is stored in local storage so this browser remembers. It is not a Google cookie. Clearing site data forgets the choice.
- Language chrome, this browser. Choosing اردو or English is stored in local storage so the nav labels stay in the language you picked. Body copy stays English. It is not a Google cookie. Clearing site data forgets it.
- Home-screen prompt. If you dismiss “Add to home screen” on a phone, we remember that in your browser’s local storage for 30 days so the bar does not return immediately. That is not a cookie, and it never leaves your device.
- Ad campaign, this tab only. If you land from a named ad, we remember utm_source, utm_medium and utm_campaign in this tab’s sessionStorage so an enquiry can name the post. That is not a cookie, and it is not a Meta Pixel. Closing the tab clears it. WhatsApp links never carry those tags.
Change your analytics choice
This covers Google Analytics and Microsoft Clarity. There is still no Google Ads pixel and no Meta Pixel. Staff login and the fare-check bot check are not part of this choice.
What we do not use
No Google Ads pixel. No Meta Pixel. No TikTok pixel. Measurement is Google Analytics and Microsoft Clarity only.
Your browser
You can also block cookies in the browser. Blocking all cookies will break staff login. It will not stop you reading packages, visas, or this page. For what we keep after you send an enquiry, see the privacy page.