Villa Dantès
Cookie Policy
Draft — awaiting legal review. Items marked ‘To confirm’ must be resolved before final publication.
1. Scope and management
This draft describes tools identified in the website code and available technical checks. Operator and contact details appear in the Privacy Policy. Cookies, localStorage and sessionStorage are different technologies: the identifiers below are not all described as cookies.
The website does not enable advertising. Google Analytics 4 activates only after valid statistical consent in Basic mode. Declining statistics does not prevent browsing or using the booking engine.
2. Necessary website tools
localStorage — villa-dantes:analytics-consent: stores the statistical choice, version and timestamp. Maximum application validity: 180 days. The entry may remain in browser storage until removed, but an expired choice does not permit tracking.
sessionStorage — vd-intro-shown: prevents repeating the opening animation during the tab session. sessionStorage — villa-dantes:module-reload-attempted: limits automatic recovery from a loading error to one attempt. A key starting with tanstack_router_reload: may also be set for that error. These entries remain within the tab session and are not sent to Google.
The public-page code has not been found to set its own authentication, advertising or shopping-cart cookies. Any infrastructure cookies must be inventoried on the public domain: absence from the code does not prove absence at the hosting layer.
To confirm on the public domain: any infrastructure tools, their purposes and lifetimes.
3. Optional statistics
Google Analytics 4 measures visits, booking and contact clicks, and entry to the external engine; it does not equate them with purchased stays. Before consent the tag is not loaded and no statistical data is sent to Google. Only analytics_storage may become granted; ad_storage, ad_user_data and ad_personalization remain denied.
The tag may create cookies named _ga and _ga_<identifier>, used by the service to distinguish visitors and sessions. Actual names and expiry dates must be recorded after observation on the public environment with consent; no unverified standard lifetime is stated. Withdrawal code searches for and removes accessible Analytics cookies; recognising a name in that code does not demonstrate that the cookie is present.
To complete after a real inventory: actual GA cookie names and expiry dates, data retention and enhanced measurement settings.
4. KrossBooking and external content
Opening the booking step loads an iframe from riccardipropertiessrl.kross.travel. The external service receives the page request and may use its own tools. This draft does not list unverified KrossBooking cookies or claim that declining Analytics controls every tool used by the external service.
Before final publication, verify the engine’s tools, notices and management of any necessary consent. This notice does not change the booking integration.
To confirm with the provider: engine cookies and storage, lifetimes, purposes and the relevant privacy notice URL.
5. Accepting, rejecting and withdrawing
Accept authorises statistics only; Reject saves a negative choice. Customize lets you select statistics, which is not preselected when no valid preference exists. Necessary remains active and Advertising remains disabled. Close does not save or grant new consent: it retains the last valid choice, if any.
You can reopen Cookie preferences at any time and reject or save statistics switched off. Withdrawal stops events, attempts to remove accessible GA cookies on the domain and, if Analytics was loaded, reloads the page to disable it. It does not erase data already sent to providers. If your browser prevents saving the choice or signals Global Privacy Control, statistics remain disabled.
You can also clear site cookies and storage through your browser settings. Your choice may then be unavailable and the banner may appear again. Browser restrictions may affect external-service functionality.
6. Provider information
See Google’s privacy and cookie information linked below. For KrossBooking, consult information available in the engine; the account-specific notice link must be confirmed. This draft does not certify GDPR compliance or replace legal and public-environment verification.