Cookies & Privacy Settings
Cookie settings
This site uses aggregate first-party request and click counts without analytics cookies, visitor identifiers, advertising or social-media tracking. No general consent banner is needed. Remembering a language is optional: use the unticked checkbox in the language menu before choosing a language, or leave it unticked to browse without saving. You can withdraw that choice below. Any future tracking technology must remain off until legally required consent is obtained.
The welcome animation works without creating a cookie or browser-storage preference. If an older version left its welcome flag in the current tab, this version removes that flag. Browser controls can also clear site data; doing so does not cancel a reservation.
What the 28 September 2026 audit found
| Technology | Provider / purpose | Duration and status |
|---|---|---|
| HTTP cookies | No Set-Cookie headers were detected in 114 sampled production responses. No cookie-writing code was found in the supplied site. | No cookie name or lifetime established. This is a bounded observation, not a guarantee about every Cloudflare security challenge. |
| travel-haven-welcome-seen | Travel Haven; first-party sessionStorage flag to skip the cosmetic logo intro. Functional preference; not required to deliver accommodation information. | Previously the tab session. Automatic read/write removed in this version; cleanup only. No consent is needed for an optional technology that is no longer used. |
| Cloudflare Web Analytics beacon | Cloudflare; third-party script at static.cloudflareinsights.com injected by production infrastructure for audience/performance measurement. | No cookie name or browser-storage lifetime detected. Provider describes it as cookieless. This does not by itself remove GDPR transparency obligations. Optional script and connections are blocked by this version's content policy; account-side removal must be confirmed. |
| NEL / Report-To, group cf-nel | Cloudflare; browser network-error reporting to a.nel.cloudflare.com. Reporting policy, not a cookie. | Observed policy max_age 604800 seconds (7 days), not a verified server-log retention period. Hosting configuration requires confirmation. |
No Google Analytics, Meta pixel, Stripe script, maps, video, CAPTCHA, chat, review or Booking.com embed was present in the audited source. Fonts and images are local. Normal browser caching may store these files to deliver the requested pages; it is not used by this code to identify visitors.
Your requested language preference
Only if you tick the optional remember box and then choose a language, we store travel-haven-language in this browser’s first-party localStorage. It contains the language, consent time, notice version and expiry, with no unique visitor identifier. Your consent is the basis for this storage and any associated personal-data processing. The 180-day limit supports returning while planning a stay without indefinite storage; it is renewed only by another explicit saved choice. Expired or obsolete values are removed at the next check. Selecting a language without ticking the box or using the button below clears the saved choice. Withdrawal is as easy as saving and does not affect earlier lawful processing. The language in the page URL continues to work without storage. No preference is sent to an analytics or advertising service.
External choices
Following a Booking.com or official event link opens another site, which can use its own technologies. The date form navigates to Booking.com only when submitted. Email links open your email application. Their policies apply to their own services.
For data rights and controller details, see Privacy and Legal Notice.
Website measurement
Website measurement: we count page requests and booking/contact clicks in aggregate, without analytics cookies, visitor identifiers or fingerprinting. Reports may include page, date, referral domain, country supplied by the hosting platform, and broad browser/device categories. We do not store full IP addresses or full referrer URLs in these reports. Aggregate reports are kept for up to 400 days to compare seasonal demand. We use them for our legitimate interest in understanding use of this accommodation website. Unique visitors are not measured. Administrators use a strictly necessary, secure session cookie that expires after eight hours.
__Host-th_admin · Travel Haven · Strictly necessary administrator session · First party · 8 hours · HttpOnly, Secure, SameSite=Strict. This cookie is set only after administrator login.