Cookie Policy
This page lists the cookies and similar technologies used on this site, what they are for, and how long they last. It is generated from the services actually running here, so it stays accurate as those change.
Strictly necessary
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
__cf_bm | Cloudflare, Inc. | Bot Management / Bot Fight Mode — distinguishes humans from bots | 30 minutes from last activity |
_cfuvid | Cloudflare, Inc. | Rate Limiting Rules — distinguishes individual users sharing an IP address | session |
cf_clearance | Cloudflare, Inc. | Proof that a Managed Challenge / JS challenge was solved | configurable |
__cflb | Cloudflare, Inc. | Load Balancer session affinity | session to 24 hours |
__cfruid | Cloudflare, Inc. | Rate limiting | session |
__cfseq | Cloudflare, Inc. | Sequence rules — request order and timing | not stated |
__cfwaitingroom | Cloudflare, Inc. | Waiting Room queue position | not stated |
cf_ob_info | Cloudflare, Inc. | Always Online — HTTP status, Ray ID, data centre | 30 seconds |
cf_use_ob | Cloudflare, Inc. | Always Online — cache port | 30 seconds |
cf_chl_* | Cloudflare, Inc. | Challenge Platform internal issue identification | not stated |
Some of these providers process data outside the European Economic Area, including in the United States.
Functional
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
| no cookie | Automattic Inc. | Profile images are loaded from Gravatar (Automattic), which receives your IP address. | — |
Some of these providers process data outside the European Economic Area, including in the United States.
Analytics
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Ireland Limited | Distinguishes users | 2 years |
_ga_* | Google Ireland Limited | Persists session state | 2 years |
_gid | Google Ireland Limited | Distinguishes users (per data stream, not cross-domain) | 24 hours |
_gat* | Google Ireland Limited | Throttles request rate (Universal Analytics legacy) | 1 minute |
_gac_* | Google Ireland Limited | Google Ads campaign attribution — only present when GA4 is linked to Google Ads | 90 days |
Some of these providers process data outside the European Economic Area, including in the United States.
A booking partner that does not use cookies
One thing the table above cannot show, because it is not a cookie. Stay22, the partner that handles the accommodation and activity links on this site, runs a script that rewrites those links and identifies your device so that a booking can be credited to us. It does this using characteristics of your browser and device rather than a cookie, and it stores an identifier in your browser’s local storage.
That script is in the marketing category and does not run until you allow it. You can refuse it, or withdraw permission later, in the cookie settings, and refusing does not limit what you can read here. Once you follow a booking link you are on the partner’s own site, under their privacy policy, and ours stops applying.