Cookie policy
Three cookies exist on this whole website, and two of them only appear if you say yes. Here is each one by name, what it does, and how to get rid of it.
Last updated 2026-09-08
The rule we follow
Article 5(3) of the ePrivacy Directive, which Slovenia implements in the Electronic Communications Act, says that nothing may be stored on or read from your device without your prior consent, unless it is strictly necessary to deliver what you asked for. That is not a formality here, it is how the site is actually built.
- On your first page view, no analytics script is downloaded and no analytics cookie is written. Not one request reaches Google.
- You are asked once. “Only necessary” and “Accept analytics” are the same size, next to each other, one click each. Neither is hidden behind a second screen.
- Closing the banner without choosing is not treated as a yes. Nothing loads until you actually pick one.
- Withdrawing is exactly as easy as agreeing, from the button at the end of this page.
Every cookie, by name
| Name | Set by | What it does | How long | Category |
|---|---|---|---|---|
| andara_consent | Andara (this website) | Remembers whether you allowed analytics cookies, so we do not ask again on every page. | 6 months | Strictly necessary |
| _ga | Google Analytics | Tells apart one visitor from another so we can count how many people read a page. Set only after you allow analytics. | 2 years | Analytics, consent required |
| _ga_E46C40SZKN | Google Analytics | Keeps the state of your visit for the same counting. Set only after you allow analytics. | 2 years | Analytics, consent required |
A note on the first one. Your answer to the cookie question is not stored in a cookie at all. It sits in your browser's local storage under the name andara_consent, it never travels to our server, and it holds one word: whether you allowed analytics, and the date you decided. We list it here because it is still something stored on your device and you deserve to know about it.
What this site deliberately does not do
It is worth writing down what is absent, because it is most of what a travel website normally carries.
- No advertising cookies, no remarketing pixels, no Meta or TikTok pixel.
- No cross-site tracking and no sharing of your visit with any advertising network.
- No embedded Google Maps or YouTube frames. The itinerary links out to Google Maps, so nothing loads from Google until you click, and the two videos are served from our own media provider rather than YouTube.
- No web fonts fetched from Google. The fonts are compiled into the site and served from our own domain, so your browser never asks Google for them.
- No chat widget, no heatmaps, no session recording.
The third parties that are here
Google Analytics 4
Runs only after you accept. It tells us how many people read a page and which pages get abandoned, and it is the reason this itinerary is written the way it is. It runs with IP anonymisation on and with Google Consent Mode set to deny advertising storage permanently, so your visit is never used to build an advertising profile. Data retention is set to 14 months. See Google's privacy policy and Google's own opt-out add-on.
Vercel
Hosts the site and measures traffic without cookies and without a persistent identifier. We still hold it back until you accept analytics, so that “Only necessary” means exactly that. Vercel also keeps ordinary server logs, which are covered in the privacy policy.
Cloudinary
Delivers the two videos. It sets no cookie, but like any server it sees your IP address when a video file is requested. Both videos are set not to preload, so nothing is fetched from Cloudinary until you press play.
Changing your mind
One button, here, at any time. It reopens the same panel you saw on your first visit and whatever you choose takes effect immediately.
You can also clear everything from the browser itself. In Chrome, Safari, Firefox and Edge it lives under Settings, then Privacy, then site data. Clearing it removes your stored answer too, so the question comes back on your next visit.
We ask again after six months in any case, because a consent given in 2026 should not still be running the site in 2030.
Questions
Anything on this page, or anything you find in your browser that is not listed here, goes to info@andara.si. If we missed a cookie, tell us and we will list it or remove it.