Cookie policy

This site stores almost nothing on your device. There is no advertising, no profiling, and no third-party tracking cookie anywhere on greekislandstreets.com. Everything listed below is either something you asked for, or a security check.

pm_lang — cookie, set by us, only once you pick a language, so the site opens in it next time. Purpose: your own preference. Duration: 12 months. Exempt from consent because you asked for it.

pm_trip — browser storage, set by us, only when you save something for My trip: your places to stay, the host maps you keep and the places you ♡ save. It never leaves your device and is not sent to us. Duration: until you remove it or clear your browser. Exempt from consent because you asked for it. pm_stay keeps a copy of your current place to stay, the same way, for pages saved before My trip.

pm_rr — session storage, set by us, only while you navigate: the time and position of the last automatic re-route, so a page with no signal does not re-route in a loop. Deleted when you close the tab.

pm_hm — session storage, set by us, only when you open directions from a host map: that map's page address, its places in order (number, name, place) and which one you opened, so the directions page can offer “All picks”, “Prev” and “Next” and the list can show where you left it. It never leaves your device and is not sent to us: only a count of which place or walk stop was used is added to the host map’s daily totals (see the privacy policy). Deleted when you close the tab.

pm_tl — browser storage, set by us, only while you are actively navigating and only if a walk trace could not be uploaded straight away (a dead spot in the alleys). It holds that one batch of anonymous positions until the connection returns, then clears itself. Nothing is written if your browser sends a Global Privacy Control signal.

__cf_bm and similar — set by Cloudflare when it has to check a request is not automated. Purpose: security. Duration: up to 30 minutes. Provider: Cloudflare, Inc.

That is the complete list for visitors. Signing in to the staff admin area also sets a session cookie, which is strictly necessary and ends when you sign out. Hotel hosts who sign in to edit their own map get one too (gis_host, strictly necessary, up to 90 days or until they sign out).

We count how many people open a page using Google Analytics 4 running at Cloudflare's edge (Cloudflare Zaraz). It runs server-side: your browser downloads no Google code, and no cookie, identifier or other data is stored on your device. To count the visit, the page sends the address of the page (with the exact position of someone asking for walking directions cut out), the page it was opened from, your browser language, screen size and time-zone offset. Your IP address is masked before anything reaches Google. We can see that a page was opened, roughly which country from, and which buttons get pressed. We cannot see who you are, we build no profiles, and we do not track you across other sites.

Because no cookie or identifier is set and nothing is stored on your device, we treat this as outside the cookie-consent rule in ePrivacy Art. 5(3) and rely on our legitimate interest in knowing whether the service works (GDPR Art. 6(1)(f)). We know the European Data Protection Board reads that rule broadly (Guidelines 2/2023) and we keep this arrangement under review. You can object at any time at [email protected].

How long: event-level data is kept 2 months and user-level data 14 months in Google Analytics, after which Google deletes it.