Cookie policy

Nothing optional runs before you decide. Analytics, embedded media and any advertising signal stay switched off until you accept them, and rejecting them keeps every part of the website, booking and payment working.

Your decision is stored for twelve months in a first party record called df.consent, kept in your browser and mirrored in a cookie of the same purpose. It contains only your category choices and the moment you made them.

These technologies are required for the website, your booking and your payment to work, so they cannot be switched off.

df_locale: routes you to the right language on the server, so the page arrives in the language you use.

Supabase authentication session: keeps staff, partner and customer accounts signed in securely. Set only after you sign in.

Booking and checkout state: short lived browser storage that holds your selection, the reservation hold and the countdown while you complete a booking.

df.visitor, df_ref and df.attribution: first party referral attribution. When you arrive through a partner link or QR code we store a referral code, an anonymous visitor key and the landing page so the booking can be credited to that partner. There is no profile, no advertising use and nothing is shared with third parties beyond the commission record of the partner concerned.

Security and anti fraud protection of form submissions and payment requests.

Remembers a language you selected yourself so you are not asked again on the next visit. If you reject this category the site still works and simply follows your browser language each time.

First party measurement of how pages and booking steps are used. This includes df.campaign, a session record of the campaign parameters a visit arrived with, and a data layer of events such as opening the tour list or starting a booking.

Google Analytics 4 (measurement ID G-4WS39K7Z39) runs only after you accept this category. It sets the _ga and _ga_* cookies, uses IP anonymisation, and reports page views and booking funnel steps. Consent is signalled with Google Consent Mode v2, which starts denied.

Microsoft Clarity (project yai2i6ccvp, Microsoft Ireland Operations Limited) also runs only after you accept this category. Clarity records anonymised usage: page views, clicks, scrolling and an anonymised session replay with all form input masked, so what you type is never captured. It sets the _clck and _clsk cookies, kept for up to one year and one day respectively, and Clarity data is retained by Microsoft for up to thirty days. Staff, partner portal, identity, contract and booking confirmation pages are excluded from recording. Microsoft explains its handling at https://privacy.microsoft.com/privacystatement.

Rejecting or withdrawing this category stops both tools and removes their cookies. Neither is loaded before your decision.

Embedded YouTube clips are only loaded after you accept this category. We use the youtube-nocookie domain, and until you accept, no request goes to YouTube at all: you see a placeholder with a button instead.

Google Reviews content shown on the website is rendered from data we hold, not from a third party script.

Payment pages hosted by our payment provider set their own strictly necessary cookies once you are redirected to pay. Those are described by the provider on the payment page.

Select Cookie settings in the footer to reopen the preference centre, change any category and save again. Withdrawing a category removes the storage it created and blocks it going forward.

You can also delete cookies and browser storage in your browser settings. If you do that, the consent record is deleted too and you will be asked again.

DUTCHFELLAS SL, CIF B24804486, Calle Ancla 42, La Cala del Moral, 29720 Málaga, Spain. Questions about this policy or your data can go to rentals@dutchfellas.eu.

How we handle personal data is described in our privacy policy.