Cookies and storage

In short

The site uses no marketing cookies, no Meta Pixel and no visitor analytics, and it has no newsletter. We do not use booking data for general marketing. The only email you can get because of an unfinished form is one reminder that you request yourself with a separate checkbox, when that option is available.

The site uses no optional cookies or tracking tools, so there is no choice that a cookie banner could offer. The reminder checkbox is about email, not cookies.

Booking storage in your browser

When you submit the booking form, your browser keeps your request for a short time in that tab, in sessionStorage under the key zagrebai.pendingBooking.v1. It holds the form details, the number of places, the total you saw, a random request key and the token from the robot check. This storage lets the submission be resent safely if the connection fails. It is not used for tracking.

It is cleared as soon as the booking is confirmed or the server finally refuses it. If the outcome stays unclear, for example after a dropped connection, the data stays in that tab until the submission is resolved or you close the tab. Closing the tab normally clears this storage.

Reminder email, when available

Typing your email into the form does not send or save it by itself. Only when you tick the separate reminder checkbox does our server save your email address, the page language, a random request key, a consent version, the time of your consent and an unsubscribe key. The checkbox itself saves nothing in your browser.

The reminder is plain text, with no images or tracking pixels. Details, the legal basis and how to unsubscribe are in the privacy notice: https://zagrebai.com/en/privacy/

Cloudflare and the robot check

Cloudflare hosts the site and, as the host, receives technical details of each request, including the IP address.

On the page with the form, your browser loads Cloudflare Turnstile, a tool that tells people from automated programs. The same tool protects sending a booking, saving a reminder and sending a withdrawal statement. Each time, our server sends Cloudflare the check token and the IP address the request came from, so the token can be verified. Cloudflare may use cookies or similar browser storage for this. The details are in the Turnstile privacy policy: https://www.cloudflare.com/turnstile-privacy-policy/

Fonts and maps

Fonts load from this site, not from outside servers. We do not embed a map in the page. Links for the map, directions and parking open other websites only when you click them, and those websites follow their own rules.

Your settings

In your browser settings you can delete or block cookies and site storage. If you block storage in the tab or the robot check, the booking form cannot be submitted.