Draft, pending legal review. The table below is not a template — it lists the cookies the site actually sets today, and it will be wrong the moment that changes, which is why the consent gate is built to refuse anything not on it.
1. What is set today
Three cookies, all strictly necessary. There is no analytics on this site, no advertising pixel, and no third-party script that could set one.
| Name | Set by | What it does | How long | Category |
|---|---|---|---|---|
sessionid | moovoy | Keeps you signed in between pages | Until you sign out, or 2 weeks | Strictly necessary |
csrftoken | moovoy | Stops another site submitting a form as you | 1 year | Strictly necessary |
moovoy_consent | moovoy | Remembers this choice, so you are not asked again | 6 months | Strictly necessary |
moovoy_consent is on the list for the same reason as the other two: a record of your choice is the one thing we cannot ask permission to store, because without it we would have to ask you again on every page.
Neither GDPR nor KVKK requires consent for strictly necessary cookies, and we do not pretend otherwise by putting an "Accept" button in front of them. What the banner asks about is the categories below — which are empty today.
2. What is not set, and would need your permission
These categories exist in the consent settings and are switched off with nothing in them. They are listed so that the mechanism is visible before it is used, rather than appearing one day inside a policy nobody re-reads.
| Category | What it would be for | Today |
|---|---|---|
| Analytics | Counting which pages are read, so the site improves | Nothing. No provider chosen |
| Marketing | Measuring whether an advertisement led to a booking | Nothing. No pixel of any kind |
If either is ever used, it will run only after you have switched that category on. Not "unless you object" — the switches start off, and off means the script does not load at all.
3. Also stored in your browser
Not cookies, but stored on your device and worth naming:
- `localStorage` holds the detail of your cookie choice, so the settings panel can show you what you picked rather than guessing.
Nothing else. No fingerprinting, no device identifier, no session recording.
4. How consent is enforced
The switch is not decoration. A script in a category you have not allowed is never added to the page — it is not loaded and blocked, it is not loaded at all.
That is deliberate, and it is the part worth checking us on: a consent banner whose "reject" only stops a cookie after the script has run is a banner that does nothing.
5. Changing your mind
Cookie settings in the footer of every page, at any time. Turning a category off removes anything already stored under it.
You can also clear cookies in your browser. If you clear sessionid you will be signed out; if you clear moovoy_consent we will ask once more.
6. Changes
If a cookie is added, this table changes on the same day and — for anything outside "strictly necessary" — you will be asked again before it is set. A new category cannot inherit an old consent.
7. Reaching us
hello@moovoy.com · see also the privacy notice.