Cookie Policy

Current cookie inventory

Before a visitor makes a choice, the public site does not set a first-party analytics or preference cookie and does not load Google Analytics. The initial assessment page loads Cloudflare Turnstile as a necessary third-party anti-abuse service; its browser, device and network processing is described in the Privacy Notice, and this policy does not characterize Turnstile as cookie-free. After a choice, ah_cookie_consent stores only the consent version, analytics choice and timestamp for up to six months. Protected administrator pages use ah_admin_session for an authenticated session and ah_csrf for cross-site request-forgery protection, each for no more than twelve hours and limited to the administration path. If analytics is accepted and configured, Google Analytics may set _ga and _ga followed by the measurement-container suffix for up to six months. The application does not use localStorage or sessionStorage.

Strictly necessary cookies

The necessary ah_cookie_consent preference records only the current consent version, analytics choice and timestamp for up to six months. It uses Path slash, SameSite Lax and Secure on HTTPS. The protected administration area uses ah_admin_session and ah_csrf for authentication and request protection. The administrator session cookie is HttpOnly. Both administrator cookies use SameSite Strict and are Secure outside local HTTP development. Necessary functionality remains available whether analytics is accepted or rejected.

Optional analytics

Google Analytics is the only optional analytics service prepared for this website. It measures privacy-limited page views, service and coverage views, assessment starts and successful submissions, and clicks on WhatsApp or email links. Events use only the page language, a query-free page path and location, a controlled link-location category and, for service views, a controlled vessel category. It is not used for advertising or remarketing. The Google tag is not loaded, no cookieless ping is sent and no GA cookie is created before consent. If accepted, _ga distinguishes browsers and _ga followed by the measurement-container suffix maintains session state; both are configured for no more than six months. Advertising storage, advertising user data and advertising personalisation remain denied.

Google Analytics cookie information

Your choices

The first-visit panel offers equally prominent Accept analytics and Reject analytics actions, plus Manage choices. Scrolling, closing the detailed panel, continuing to browse or inactivity does not indicate consent. No optional choice is preselected. Cookie Settings in the footer reopens the controls at any time. Withdrawing consent immediately denies future analytics activity and removes accessible first-party _ga cookies where possible. Withdrawal does not retroactively delete information already collected by Google.

Preference version and retention

The ah_cookie_consent preference is versioned and kept for up to six months. Missing, malformed, expired or older-version values are invalid and require a new choice. Google Analytics cookies are also configured for no more than six months and may be refreshed during consented visits. The production GA4 property must use the two-month event and user-data retention setting; Google explains that standard aggregated reports are not controlled by that setting and may remain available longer.

Provider, transfers and policy changes

Google Ireland Limited provides Google Analytics for EEA users and may involve affiliated companies or subprocessors in other countries. Google describes applicable transfer safeguards in its privacy documentation; the final production arrangement requires qualified legal review. Relevant Google privacy information is linked on this page. Adding another optional service or materially changing the analytics purpose, cookies, duration or transfers requires an updated policy, a new consent version and a new visitor choice.

Google Privacy Policy · How Google uses information from partner sites

Contact

Questions about cookies or privacy choices may be sent to boat@aegeanhorizon.com.

boat@aegeanhorizon.com