Last updated: 20 October 2026
Cookies are small text files a website or app stores in your browser to remember information between visits. In the Valiris application we use them only where strictly necessary to make the service work, such as keeping you signed in. On this website we also use advertising measurement cookies, but only if you accept them first.
This website, valiris.io, sets no cookies of its own. None of the Google cookies below is downloaded or stored until you choose "Accept" in the cookie banner. If you refuse, no analytics cookie is set and no request is made to Google at all.
When you accept, we load Google Analytics, and nothing else from Google. It does one thing: it lets us understand how the site is used in aggregate (which pages people read, where they come from, where they drop off). We run no advertising and show no ads, so no advertising cookie is ever set. Links of the form valiris.io/l/... that we share in emails and posts set no cookie either; they are described in our privacy policy.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id> | Tells one visitor apart from another so we can measure how the site is used in aggregate (Google Analytics) | 2 years | |
| valiris.consent | Valiris | Remembers whether you accepted or refused, so we don't ask again on every page. Stored in your browser's local storage, not a cookie, and holds nothing but your answer and its date | 6 months, then we ask again |
| Display language preference | Valiris | Remembers whether you're reading the site in English or French. Stored in your browser's local storage, not a cookie, and never leaves your device | Until you clear your browser storage |
Our counterparty is Google Ireland Limited. For Google Analytics, Google acts as our processor: it handles that data on our instructions, under the Google Ads Data Processing Terms, and we remain responsible for it. Google states that it transfers this data outside the EU under the European Commission's standard contractual clauses and its participation in the EU-US Data Privacy Framework. Its own privacy policy explains how it handles data it controls itself.
The table below covers the Valiris application, app.valiris.io, which operators and their team members log into to manage guest communications. It runs no advertising or analytics cookies at all.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-gzxxsnooktnozndocudd-auth-token (and its chunked variants, e.g. suffixed .0, .1) | Keeps you signed in and manages your session (Supabase authentication) | Essential | Persists while you're logged in, refreshed automatically |
| NEXT_LOCALE | Remembers your preferred interface language (English or French) | Functional | 1 year |
| valiris.portal.lang | Remembers the language a guest chooses on their booking portal, so it carries across the portal, payment and maintenance pages. Stored in your browser's local storage, not a cookie, and holds nothing but a two-letter language code | Functional | Until you clear your browser storage |
| valiris.assistant.thread.* | Keeps your conversation with Iris and Val (the in-app assistants) if the page reloads. Stored in your browser's session storage, not a cookie, scoped to your account, and never sent to us or anyone else from there | Functional | Until you close the tab or start a new conversation |
| valiris.* (interface preferences) | Remembers the interface choices you make in the app, such as collapsed menus and folded sections, your dashboard layout, tips you dismissed and an unsaved draft, plus when you last opened the dashboard so it can show what happened since. Stored in your browser's local storage, not a cookie, and never sent to us or anyone else | Functional | Until you clear your browser storage |
| stripe_connect_state | Security check (CSRF protection) while an operator connects their Stripe account | Essential | 10 minutes, then deleted |
| valiris_onboarded | Remembers that your account has finished setup, so each page of the app opens without checking it again. Holds only your user ID and grants no access | Essential | 12 hours |
| Guest portal session | Keeps a guest signed in to their booking portal after they confirm their surname | Essential | Duration of the portal session |
Alongside Google Analytics described in section 2, a few third-party tools load in specific places. None of these are advertising or analytics trackers, and we do not use them to profile you:
GetYourGuide is different from the three above, and is the one third party in the guest portal that is not exempt from consent. Where an operator has connected their own GetYourGuide partner account, a guest's booking portal can show tours and activities near the property. GetYourGuide sets its own cookies to display those listings and to measure bookings made through the links, so nothing about it is requested until the guest explicitly asks for it: the section renders as a plain placeholder that names GetYourGuide, says cookies will be set and what for, and links to this page. Tapping "Show activities" is the consent, and it is asked for on the guest's own portal, per stay, never remembered beyond that page. If the guest never taps, no request reaches GetYourGuide at all. GetYourGuide acts as an independent data controller for what it does with that data under its own privacy policy. Valiris receives no data back from GetYourGuide and is not part of any booking made there.
Since 16 October 2026 we use no advertising, no remarketing and no Google Tag Manager: the only Google tool on this website is Google Analytics, loaded after you accept. No social media trackers. No Meta pixel. No session recording, heatmaps, or behavioural profiling tools. The Valiris application itself carries no advertising or analytics cookies whatsoever, and we never sell your data.
Analytics cookies are never set without your consent. When you first visit this website you'll see a banner with two buttons, "Accept" and "Reject". Refusing takes exactly one click, the same as accepting, and refusing costs you nothing: the site works identically either way.
You can change your mind at any time. Select Cookie settings in the footer of any page and the banner will reappear. We also ask you again every six months, so a choice you made once doesn't follow you forever. Withdrawing consent stops any further analytics cookies from being set and removes the Google Analytics cookies on this site; to remove cookies already stored, clear them in your browser as described in section 7.
The essential and functional cookies in section 3 do not need consent. Under guidance from the CNIL (Commission Nationale de l'Informatique et des Libertés), cookies that are strictly necessary for a service to function are exempt: without them you couldn't stay signed in, keep your language preference, securely connect Stripe, or use your guest portal. Cal.com and Cloudflare Turnstile in section 4 are exempt for the same reason: Turnstile is a security control, and Cal.com only ever loads after you actively choose to book a call, so any cookies it sets are part of the action you asked for.
GetYourGuide, also in section 4, is not exempt, so it is consented to separately, in the guest portal itself. It is asked for where and when it is relevant, rather than in a banner on arrival: nothing loads until a guest taps "Show activities" on the section that explains what will be set and why. Refusing is the default and takes no action at all, so it is at least as easy as accepting. That choice is not remembered between visits, which means a guest who taps once has not agreed to anything for the rest of their stay: reload the page and the activities are gone again.
Most browsers let you view, block, or delete cookies from their settings menu. Deleting the Google cookies listed in section 2 is safe and changes nothing about how the site works. Blocking the essential cookies in section 3 will break core functionality, most notably, you'll be signed out and unable to stay logged in to the app. Refer to your browser's help documentation for exact steps.
Questions about this policy? Email us at contact@valiris.io.
Questions about this policy?
We're a small team and we read every email. Reach out directly.
contact@valiris.io