Document under review. The institutional details marked below are still to be completed and this version is not final.
Cookies
Five records in your browser. None of them follows you beyond this site.
This page lists, one by one, everything this site keeps in your browser. No vague categories and no inflated inventory: if we ever start measuring audience, you will read it here before the first measurement is taken.
Last updated
What cookies are — and what else stores information
A cookie is a small file a site keeps in your browser to remember something from one page to the next. Alongside it are two relatives — local storage and session storage — which hold information in the same way but do not travel back to the server with every request.
This policy covers all three, because the technical difference does not change what matters to you: what is stored, what for, and for how long.
The categories that exist
What a site keeps in your browser is usually sorted into three categories. They hold here as they hold anywhere.
Essential
Without them the site does not work, or stops being safe: holding a form session, protecting a submission against fraud, remembering your own decision about this notice. They do not depend on consent — but they do depend on transparency, which is why they are listed below.
Preference
They store a choice of yours to improve the experience without altering the content — remembering, for instance, that the opening animation has already played in this session, or that you asked to freeze motion across the pages. Nothing here identifies you.
Analytics
They measure audience: how many people visit, where they arrive from, what they read. They only enter with your consent — and this site, today, uses none. Should it ever use them, this page will be updated before the first measurement.
What this site uses today
Transparency calls for a list, not an adjective. This is everything this site keeps in your browser — nothing beyond it:
- goa-consent — local storage, essential category. Holds your decision about the cookie notice, with the value “all” or “essential only”. It stays until you change your mind from the footer or clear this site data in your browser.
- goa_consent — cookie, essential category. Repeats your decision in a first-party cookie so the server knows it on the very first request. It lasts six months, is marked SameSite and, over an encrypted connection, Secure.
- goa-seen — session storage, preference category. Records that the opening animation has already played, so it is not repeated on every page. It disappears when you close the tab.
- goa-motion — local storage, preference category. Holds your choice to pause or resume the continuous animations. It stays until you change your mind.
- goa_session — cookie, essential category. Created only when you submit a form, to validate that submission against fraud. Marked HttpOnly and SameSite, and Secure over an encrypted connection. It expires at the end of the browser session.
There is no analytics, advertising or cross-site tracking cookie. None of the five items above follows you beyond this domain.
How we ask for consent, and how to revisit it
On your first visit a discreet notice asks what you prefer. It does not block the content and hides no option: accepting everything and accepting only the essential carry the same visual weight and sit the same distance from your finger.
- Accept — records the value “all”, which will also cover analytics should any ever exist.
- Essential only — records “essential only”. Nothing beyond the strictly necessary will be stored.
- Revisit the decision — use the cookie preferences control in the footer, on any page. The panel reopens with your current choice marked, and withdrawing costs exactly what consenting costs.
Since no analytics processing exists today, both answers produce the same visible behaviour. The difference is the gate: while nobody has decided, the site runs as “essential only” — the default is not to track. On refusal or withdrawal, we actively delete the known tracking cookies already sitting in your browser.
How to control it from the browser
The browser is yours, and it has the last word. Every current browser lets you block, limit and erase what sites store:
- Block third-party cookies by default — this does not affect this site, which uses none.
- Clear the data of one specific site without losing your sessions elsewhere.
- Browse in a private window: everything stored is discarded when the window closes.
- Send privacy preference signals such as Global Privacy Control, which we treat as a refusal of analytics measurement.
Blocking essential storage does not prevent you from reading the site, but it may prevent form submissions — the fraud protection depends on it.
Third parties: booking engine and embedded content
This site embeds no videos, interactive maps, external fonts or social media widgets. Nothing from a third party loads with the page — which is why there is no third-party cookie to declare.
When you begin a reservation, however, you are taken to the booking engine of the property: another domain, another policy. From that click onwards, the terms and cookies of that service apply, and they are worth reading.
Changes to this policy
If we begin measuring audience, or use any technology that stores something new in your browser, this page is updated first — not afterwards. The date at the top is the reference.
A change that widens what we store requires fresh consent: the notice appears again and your earlier choice is not assumed.
If what you observe does not match this list, we want to know.
Auditing our own site is our duty, but four eyes see more than two. For questions about cookies and browser storage, write to [A PREENCHER: e-mail do Encarregado (DPO)] or use our general channel.