Last updated: 31 July 2026
Cookies are small text files a website or app stores in your browser to remember information between visits. In the Valiris application we use them only where strictly necessary to make the service work, such as keeping you signed in. On this website we also use advertising measurement cookies, but only if you accept them first.
This website, valiris.io, sets no cookies of its own. None of the Google cookies below is downloaded or stored until you choose "Accept" in the cookie banner. If you refuse, no advertising cookie is set and no request is made to Google at all.
When you accept, we load Google Tag Manager and Google Analytics. Together they do three things: they let us see which of our advertising campaigns brought you here, they let us understand how the site is used in aggregate (which pages people read, where they drop off), and they let Google show you our ads again on other sites.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Records that you arrived from one of our ads, so a later sign-up can be attributed to that campaign | 90 days | |
| _ga, _ga_<id> | Tells one visitor apart from another so we can measure how the site is used in aggregate (Google Analytics) | 2 years | |
| IDE, test_cookie (doubleclick.net) | Measures ad performance and allows Google to show you our ads again on other sites | Up to 13 months (IDE), 15 minutes (test_cookie) | |
| valiris.consent | Valiris | Remembers whether you accepted or refused, so we don't ask again on every page. Stored in your browser's local storage, not a cookie, and holds nothing but your answer and its date | 6 months, then we ask again |
| Display language preference | Valiris | Remembers whether you're reading the site in English or French. Stored in your browser's local storage, not a cookie, and never leaves your device | Until you clear your browser storage |
Our counterparty is Google Ireland Limited. The two roles differ. For Google Analytics, Google acts as our processor: it handles that data on our instructions and we remain responsible for it. For the advertising cookies, Google acts as an independent data controller, meaning it decides how it uses that data under its own privacy policy. Google states that it transfers this data outside the EU under the European Commission's standard contractual clauses and its participation in the EU-US Data Privacy Framework.
The doubleclick.net cookies are set on Google's own domain, so we cannot delete them for you. Withdrawing consent stops any new ones being set, and you can remove the existing ones in your browser settings as described in section 7.
The table below covers the Valiris application, app.valiris.io, which operators and their team members log into to manage guest communications. It runs no advertising or analytics cookies at all.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-gzxxsnooktnozndocudd-auth-token (and its chunked variants, e.g. suffixed .0, .1) | Keeps you signed in and manages your session (Supabase authentication) | Essential | Persists while you're logged in, refreshed automatically |
| NEXT_LOCALE | Remembers your preferred interface language (English or French) | Functional | 1 year |
| valiris.portal.lang | Remembers the language a guest chooses on their booking portal, so it carries across the portal, payment and maintenance pages. Stored in your browser's local storage, not a cookie, and holds nothing but a two-letter language code | Functional | Until you clear your browser storage |
| stripe_connect_state | Security check (CSRF protection) while an operator connects their Stripe account | Essential | 10 minutes, then deleted |
| Guest portal session | Keeps a guest signed in to their booking portal after they confirm their surname | Essential | Duration of the portal session |
Alongside the Google advertising tags described in section 2, a few third-party tools load in specific places. None of these are advertising or analytics trackers, and we do not use them to profile you:
GetYourGuide is different from the three above, and is the one third party in the guest portal that is not exempt from consent. Where an operator has connected their own GetYourGuide partner account, a guest's booking portal can show tours and activities near the property. GetYourGuide sets its own cookies to display those listings and to measure bookings made through the links, so nothing about it is requested until the guest explicitly asks for it: the section renders as a plain placeholder that names GetYourGuide, says cookies will be set and what for, and links to this page. Tapping "Show activities" is the consent, and it is asked for on the guest's own portal, per stay, never remembered beyond that page. If the guest never taps, no request reaches GetYourGuide at all. GetYourGuide acts as an independent data controller for what it does with that data under its own privacy policy. Valiris receives no data back from GetYourGuide and is not part of any booking made there.
No social media trackers. No Meta pixel. No session recording, heatmaps, or behavioural profiling tools. The Valiris application itself carries no advertising or analytics cookies whatsoever, and we never sell your data.
Advertising cookies are never set without your consent. When you first visit this website you'll see a banner with two buttons, "Accept" and "Reject". Refusing takes exactly one click, the same as accepting, and refusing costs you nothing: the site works identically either way.
You can change your mind at any time. Select Cookie settings in the footer of any page and the banner will reappear. We also ask you again every six months, so a choice you made once doesn't follow you forever. Withdrawing consent stops any further advertising cookies from being set; to remove cookies already stored, clear them in your browser as described in section 7.
The essential and functional cookies in section 3 do not need consent. Under guidance from the CNIL (Commission Nationale de l'Informatique et des Libertés), cookies that are strictly necessary for a service to function are exempt: without them you couldn't stay signed in, keep your language preference, securely connect Stripe, or use your guest portal. Calendly and Cloudflare Turnstile in section 4 are exempt for the same reason: Turnstile is a security control, and Calendly only ever loads after you actively choose to book a call, so any cookies it sets are part of the action you asked for.
GetYourGuide, also in section 4, is not exempt, so it is consented to separately, in the guest portal itself. It is asked for where and when it is relevant, rather than in a banner on arrival: nothing loads until a guest taps "Show activities" on the section that explains what will be set and why. Refusing is the default and takes no action at all, so it is at least as easy as accepting. That choice is not remembered between visits, which means a guest who taps once has not agreed to anything for the rest of their stay: reload the page and the activities are gone again.
Most browsers let you view, block, or delete cookies from their settings menu. Deleting the Google cookies listed in section 2 is safe and changes nothing about how the site works. Blocking the essential cookies in section 3 will break core functionality, most notably, you'll be signed out and unable to stay logged in to the app. Refer to your browser's help documentation for exact steps.
Questions about this policy? Email us at contact@valiris.io.
Questions about this policy?
We're a small team and we read every email. Reach out directly.
contact@valiris.io