Legal
Cookie policy
The complete inventory of what this website can store in your browser. It is short because there is genuinely very little — and it is generated from the same registry the consent banner enforces, so it cannot describe something different from what actually runs.
Provisional pre-launch legal draft. It will be reviewed and replaced before paid commercial activation. Version 1.0 (provisional draft), effective 5 August 2026.
Cookies, local storage and similar technologies
A cookie is a small file a website asks your browser to store and send back on later visits. Local storage and session storage keep data in your browser too, but the browser never sends them anywhere by itself — they can only be read by code running on the page. A tracking pixel is an invisible request to a third party whose purpose is to report that you were here.
The law that matters here is Art. 5(3) of the ePrivacy Directive as implemented in Cyprus and across the EU: storing information on your device, or reading information already stored there, needs your consent unless it is strictly necessary to provide the service you asked for. Consent must be a clear affirmative act. A pre-ticked box, continued scrolling, or simply not objecting is not consent.
What this website actually uses
As at the effective date of this policy, and verified against the deployed site rather than assumed:
- Cookies: none. This site sets no cookie of any kind. No response from it carries a
Set-Cookieheader. - Analytics: none. No audience measurement, no product analytics, no performance monitoring service.
- Advertising and marketing: none. No pixel, no retargeting tag, no conversion tracking.
- Third-party content: none. No embedded video or map, no externally hosted font, no CAPTCHA, no third-party CDN, no payment script. The site’s Content-Security-Policy is
default-src 'self', which means the browser will refuse a request to any other origin — a third-party tracker could not load here even if one were added by mistake. - Browser storage: three items, listed in full below. One is strictly necessary; the other two are optional and are not written unless you allow them.
That is the whole picture. The categories below therefore include two that are currently empty, and they are shown as empty rather than hidden — you are entitled to know that “analytics” contains nothing, because that is what makes the choice meaningful.
Full inventory
Generated from the consent registry that the banner enforces. If a technology is not in this table, the site does not run it.
Strictly necessary
Required for the website to work and to remember the privacy decision you just made. These cannot be switched off, and they are limited to exactly that — there is nothing else in this category.
Preferences
Remembers choices you make yourself, so the site can respect them next time. Refusing means the site simply will not remember them; every page stays reachable.
Analytics
Audience measurement, product analytics and performance analysis. We use none today. If we ever add one, it will appear here and you will be asked again before it runs.
Marketing
Advertising, retargeting and campaign attribution. We use none today. If we ever add one, it will appear here and you will be asked again before it runs.
How to change or withdraw your consent
Select “Cookie settings” in the footer of any page. The same dialog you saw on your first visit opens, showing your current choices; change them and save, or reject everything in one click. Withdrawal takes effect immediately and also erases what the refused category had stored — it does not merely stop future writes.
You are never shown a cookie wall: refusing everything leaves every page of this site fully readable and every function usable.
Controlling storage in your browser
Independently of this site, your browser lets you view and delete cookies and local storage, block them by site, and browse in a private window that discards them on exit. These controls live in the privacy or site-data settings of Chrome, Safari, Firefox, Edge and every other mainstream browser. Clearing this site’s data also clears your consent record, and you will be asked again on your next visit.
The Vivestay application is separate
This policy covers www.vivestay.com only. The Vivestay application at app.vivestay.com is a different service on a different hostname; it uses a strictly necessary session cookie to keep an operator signed in, which is disclosed within the application itself. Nothing on this website can read it.
If this changes
Every technology this site uses is declared in one registry, and the consent interface is generated from it. If a technology is added, this table changes with it and the consent policy version increments, which asks every visitor again. Your consent applies only to the purposes and technologies disclosed in the version you were shown — never to future ones.
Version 1.0 (provisional draft) · effective 5 August 2026 · consent policy version shown in the “Cookie settings” dialog