Cookie policy
We use a small number of cookies to run this site. This page explains exactly what they are and how the choice you make on our cookie banner controls them. See our Privacy policy for how we handle data more broadly.
Two categories, nothing hidden
When you first visit, a banner asks you to accept or reject optional cookies. Both choices are presented equally — there's no dark pattern steering you toward “accept.” Necessary cookies are never subject to that choice, since the site cannot function without them.
Strictly necessary (always on)
| Cookie | Purpose | Duration |
|---|---|---|
| visitor-levy-calculator-session | Keeps you signed in to your account (Laravel Sanctum session cookie). Secure and HTTP-only — never readable by page scripts. | Session (configurable server-side) |
| XSRF-TOKEN | Cross-site request forgery protection for the same session, set automatically by our API. | Session |
| vlc-cookie-consent | Remembers your cookie choice itself (“accepted” or “rejected”) so we don't ask again on every visit. | 1 year |
Optional analytics (only with your consent)
If you accept optional cookies, we load Google Analytics (GA4) to understand aggregate site usage — which pages are visited, roughly how often, and general traffic patterns. IP addresses are anonymised in this configuration. No booking, guest, or financial data is ever included in analytics events.
Nothing from Google Analytics loads at all — not even in a disabled state — until you explicitly accept optional cookies via the banner. If you reject, or haven't yet chosen, no analytics script request is made.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga, _ga_* | Google Analytics — distinguishes visitors for aggregate usage stats. | Up to 2 years |
Changing your choice
Clear the vlc-cookie-consent cookie in your browser and reload the page to see the consent banner again, or use your browser's cookie settings to remove it directly. If you accepted analytics and later reject, the analytics script already loaded in that tab won't be removed retroactively — reload the page for the change to take full effect.
Questions about this policy? Email privacy@visitorlevycalculator.co.uk.