Legal
Cookies
Last updated:
This page lists every cookie or similar technology this website may set, what it’s for, and how to change your preferences.
What we set, and when
We organise cookies into three categories. Necessary cookies are always on (the site can’t work without them). Analytics and marketing cookies are off by default — they only load if you accept them in the consent banner.
Necessary
Always active. The site is built to work without cookies for ordinary browsing. When you pay for a booking on this site, our payment processor Stripe sets strictly-necessary cookies (__stripe_mid, __stripe_sid) for fraud prevention — these apply only during checkout and don’t track you across the web. Some of our service providers (e.g. Vercel) may set cookie-free tokens to keep the page loading reliably; these don’t identify you.
Analytics
Loaded only if you click Accept all or toggle the Analytics category on. Helps us understand which pages people read and where the site can improve.
| Cookie | Provider | Purpose | Lifespan |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes unique visitors | 2 years |
_ga_* | Google Analytics 4 | Persists session state across pages | 2 years |
_gid | Google Analytics 4 | Distinguishes unique visitors (24-hour) | 24 hours |
MUID | Microsoft Clarity | Anonymous user identifier (Microsoft-wide) | 13 months |
_clck, _clsk, CLID, ANONCHK, SM | Microsoft Clarity | Session identifiers for heatmaps and replays | 1 day – 1 year |
Microsoft Clarity records anonymous session replays — it records what was clicked and scrolled, not what was typed (form fields are masked by default). Google Analytics 4 is configured with IP anonymisation enabled and Google Signals disabled, so it doesn’t build advertising profiles from your visit.
Marketing
Currently unused. We don’t run advertising campaigns and we don’t install ad-tracking pixels (Meta, TikTok, Google Ads, Pinterest, etc.). The category exists in the consent banner as a placeholder so we don’t have to redesign the banner if that changes in future. If we ever add a marketing tracker, we’ll list it here and the consent banner will surface again so you can re-decide.
Other tracking we use
One first-party tool runs regardless of consent because it’s cookie-free and aggregate:
- Vercel Analytics — counts page views per route. No cookies, no fingerprinting; uses anonymised request data only.
This is documented in Vercel’s privacy policy as compliant with UK PECR and EU GDPR without consent.
How to change your preferences
Click the button below to re-open the consent banner and update your choices. Changes take effect immediately — analytics cookies are cleared if you switch the category off.
Browser-level controls
You can also manage cookies in your browser settings:
Most modern browsers also let you block third-party cookies entirely or use a private/incognito mode that clears them at the end of each session.
More information
For the full picture of what data we collect and how we use it, see our Privacy Policy. Questions about cookies specifically can go to hello@bothanjuraretreat.co.uk.