Cookie Policy
Two kinds of storage live here: essentials that make the site work (always on), and analytics/advertising tags from Google, Meta and TikTok that load only after you choose “Accept all”. Decline, and they never load.
1. What cookies and local storage are
Cookies are small text files a website stores in your browser; local storage is a similar mechanism that stays on your device and is not sent with every request. Both can be essential (making the site work) or non-essential (analytics, advertising). Everything non-essential on Innworthy sits behind the consent notice.
2. What we store
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| cookie-consent | Local storage | Remembers whether you accepted or declined the cookie notice, so we do not ask again. | Until you clear your browser data |
| XSRF-TOKEN, innworthy_session | Cookies (essential) | Standard security tokens that protect forms against cross-site request forgery and keep a short-lived session. They identify a browsing session, not a person. | Session / up to 2 hours |
| _ga, _ga_*, _gcl_* | Cookies (consent-only) | Google Analytics 4 and Google Ads: visit measurement, conversion attribution. Loaded via Google Tag Manager only after you accept. | Up to 24 months (set by Google) |
| _fbp, _fbc | Cookies (consent-only) | Meta Pixel: measures campaigns we run on Facebook/Instagram. | Up to 3 months (set by Meta) |
| _ttp, _tt_* | Cookies (consent-only) | TikTok Pixel: measures campaigns we run on TikTok. | Up to 13 months (set by TikTok) |
Consent-only rows appear in your browser only after you choose “Accept all”. We use Google Consent Mode v2: before consent, every advertising and analytics storage flag is set to “denied” and no tag script is even requested.
3. How consent works here
- “Accept all” — loads Google Tag Manager with analytics and advertising storage granted; Google, Meta and TikTok tags may then set the cookies listed above.
- “Essential only” — nothing beyond the essential rows is requested. The site is fully functional either way.
- Change your mind: clear the site's browser data (or just the cookie-consent key) and the notice will ask again.
- Booking clicks are measured on our own server when you follow a link — described in the Privacy Policy — and require no cookie at all.
4. Third-party requests
Some resources load from third parties and involve your IP address, though they set no tracking cookies on our pages: Google Fonts (typography), the map-tile provider on the map page (OpenStreetMap/CARTO tiles), and — once you click through to book — Booking.com, which applies its own cookie policy on its own site.
5. Managing cookies
You can clear or block cookies and local storage in your browser settings at any time; the Site will keep working, though it may ask for your consent choice again. Instructions live in your browser's help pages (Chrome, Safari, Firefox, Edge).
6. Changes
Any new tag or storage appears in this table before it ships, and it always sits behind the same consent gate. The date at the top reflects the latest revision.
7. Contact
Questions about cookies: [email protected].