Cookie and Tracking Policy

Cookies are small values a browser can send with requests to a website. Local storage keeps values on a device until removed; session storage normally lasts for a browser tab’s session. IndexedDB stores structured data, and Cache Storage holds downloaded responses. A service worker supports catalogue loading and updates. These technologies are not all cookies and do not all have the same purpose.

Optional website analytics starts off. Use Accept optional cookies, Reject optional cookies or Manage preferences, and reopen Cookie settings in the footer at any time. Optional analytics is currently off. Your choices do not affect access to the website or catalogue. Hosting logs and external services have separate processing practices; these choices do not control them.

The theme key stores your color choice; cbi-decorative-motion stores your motion choice. cbi-saved-ideas-v1 stores up to 30 saved website ideas, and cbi-atlas-saved-v1 stores saved Atlas selections. These are convenience features, not staff authentication. They have no application-defined time expiry and can remain until changed, removed through the relevant feature, or removed by the browser.

cbi-promotion-dismissals-v2 stores promotion identifiers and dismissal-until timestamps based on each campaign’s configured duration. The older cbi-dismissed-promotions-v1 list is also read for compatibility. Expired timestamps stop suppressing a promotion; they are not a guarantee of immediate physical deletion. cbi-promotion-shown-v1 uses session storage to limit repeated displays within a tab session. These controls support promotion presentation and are not consent records or advertising pixels.

When using the catalogue, cbi-catalogue-v1 in IndexedDB stores the approved content snapshot and active-cache reference. Catalogue caches hold the application shell, static files, staged and active media, documents, and optional downloaded panorama content. They support offline browsing and safe updates and do not contain CMS sign-in credentials by design.

Connected catalogues check and apply published updates automatically. Offline copies update after reconnection. Normal recovery and version cleanup may remove superseded files. Browsers can evict local data under storage pressure. Removing all site data can remove offline access; reconnect and keep the catalogue open to recover. This page does not delete or reset downloads.

The optional Google Maps iframe is created only after you choose Load Google Maps. The direct map link remains available. YouTube videos use youtube-nocookie.com and are created after you choose to play; this domain does not mean no personal data is processed. Loading either service shares your IP address and browser information with Google, which may use cookies or other storage under its own practices. The Facebook video player is also created only after you choose to play; this connects to Meta, which may receive your IP address and browser information and use cookies or other storage under its own practices.

The map choice applies to the current component visit and is not saved as ongoing consent. Closing the map removes its display; it does not erase information already sent or provider storage. External booking, Google Maps, Waze, Apple Maps, social and sharing links connect to their respective services when followed. Third-party storage names and expiry periods depend on the provider and browser and have not been verified here.

Stay, day-tour, event and wedding inquiries use the website’s native form and configured resort intake service. They remain available without accepting analytics or marketing. An inquiry is not a confirmed booking. Recruitment may use the native form and Brevo delivery when enabled, or a Fillout form. Opening an embedded Fillout form connects to Fillout before submission; a direct form link is also available. Review the form’s notice before entering details.

Cloudbeds booking opens an external service. Dates, guest count or promotional code may be included in a booking handoff where supported. Booking, payment, form-provider and hosting cookies must be reviewed with those providers; this website does not control their expiry or erase their data. Font files are served with the application; the source uses Next.js font tooling rather than a browser Google Fonts stylesheet.

Authorized CMS staff use cbi_access and cbi_refresh cookies for Supabase-backed authentication. Source sets HttpOnly, SameSite Strict and Secure in production, with path /. The access cookie lasts no longer than the returned session lifetime capped at one hour; the refresh cookie is set for 24 hours. Refresh or sign-out can replace or expire these values. These are staff security functions, not guest tracking preferences.

Staff resumable video uploads may keep tus upload-recovery metadata in browser storage. Successful upload removes its recovery fingerprint; interrupted uploads may leave metadata for recovery. No fixed cleanup period is claimed. Use CMS sign-out and the supported upload workflow rather than a general privacy reset.

Change theme and motion using their controls. Manage saved ideas and Atlas selections in those features. Leave external maps and videos unloaded if you do not want those embedded connections. Forms, booking and contact links remain separate choices.

Cookie settings stores only your analytics choice, policy version and timestamp in local storage under cbi-optional-consent-v1. The current renewal interval is 180 days; missing, invalid, expired or unavailable storage means optional analytics stays off. This interval is a site design recommendation, not a statutory retention period. Preferences are checked again before optional events and synchronized across open tabs where supported. Withdrawal stops future optional events. No optional analytics storage is currently created. This control preserves saved ideas, display preferences, offline downloads and staff sessions. It cannot erase information already received by external providers; use the privacy request route for those records. Browser-wide clearing can remove downloads and preferences and sign staff out.

For privacy questions, use the resort contact below and ask for the person responsible for data protection.