Legal
Cookie policy
This page explains exactly which cookies and similar identifiers we use, who sets them, why, and for how long. You can change your preferences anytime from the footer.
1. What are cookies?
Cookies are small text files stored on your device when you visit a site. Besides cookies we also use similar identifiers (localStorage, sessionStorage, pixel tags) under the same consent categorization.
2. Categories we use
- Strictly necessary (always on)
- Admin authentication, language preferences, storing your consent choices. The site cannot function without these — no consent required (art. 5(3) ePrivacy).
- Security (always on)
- reCAPTCHA Enterprise — used exclusively to block bots when submitting forms. Not used for tracking or advertising.
- Analytics (optional)
- Google Analytics 4 — aggregated audience measurement. IP anonymized via Consent Mode v2. Active only if you accept “Analytics” in the banner.
- Marketing (optional)
- Meta Pixel + TikTok Pixel — remarketing on those networks and ad-campaign measurement. Active only if you accept “Marketing” in the banner.
3. Full cookie inventory
The table below lists every cookie and similar identifier this site sets directly or through third-party scripts loaded on consent.
| Name | Provider | Category | Purpose | Duration | Type |
|---|---|---|---|---|---|
| access_token | cabanadesubdeal.ro | Strictly necessary | Authenticated admin session (JWT, httpOnly). | 12h | Cookie |
| refresh_token | cabanadesubdeal.ro | Strictly necessary | Admin session refresh (httpOnly). | 7d | Cookie |
| cookie-consent | cabanadesubdeal.ro | Strictly necessary | Stores your cookie consent preferences. | 12 mo | localStorage |
| lang | cabanadesubdeal.ro | Strictly necessary | Selected language (RO/EN/HU). | persistent | localStorage |
| _GRECAPTCHA | google.com | Security | reCAPTCHA Enterprise — anti-bot protection on form submissions (booking, contact). | 6 mo | Cookie |
| _ga | google.com | Analytics | Google Analytics 4 session identifier (IP anonymized). | 2y | Cookie |
| _ga_QKGELYR0C2 | google.com | Analytics | GA4 property-specific — retains session state for our GA4 property. | 2y | Cookie |
| _gid | google.com | Analytics | Distinguishes unique users for daily reports (legacy GA). | 24h | Cookie |
| _fbp | facebook.com | Marketing | Meta Pixel — browser identifier used for Facebook/Instagram remarketing. | 90d | Cookie |
| _fbc | facebook.com | Marketing | Meta Pixel — set when the user arrives via a Meta ad click (fbclid parameter). | 90d | Cookie |
| _ttp | tiktok.com | Marketing | TikTok Pixel — identifier for TikTok conversion measurement and remarketing. | 13 mo | Cookie |
4. How to withdraw consent
Click “Cookie settings” in the footer to reopen the preferences panel anytime. When you withdraw “Marketing” we delete the Meta cookies (_fbp, _fbc) and TikTok cookie (_ttp) from your browser and tell the respective SDKs to stop firing the pixel for the current session. Google Consent Mode v2 switches GA4 to “denied” for ad_storage / analytics_storage and GA4 falls back to cookieless pings.
5. Third-party cookies
We have no direct control over cookies set by Google, Meta, or TikTok. For details see their respective policies (linked in the Privacy Policy, “Sub-processors” section).
6. Your rights (GDPR)
Full details in the Privacy Policy. In short: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to the Romanian DPA (ANSPDCP).
7. Policy changes
When we add, remove, or materially change a cookie, we bump the policy version and re-prompt for consent. See the full changelog below.
Changelog
- 27.04.2026v1.1Full cookie inventory, Meta & TikTok consent revocation, expanded processor disclosure.
- 26.04.2026v1.0Initial publication.