Cookie Policy
Aura Tavira · Aura Wines — Forte & Evocativa, Lda Last updated: October 2026 · Version 2.0
The Portuguese version is the legally binding version. This Policy complements the Privacy Policy.
1. What cookies and similar technologies are
Cookies are small files stored on your device. We also use similar technologies: pixels, local scripts, identifiers in localStorage / sessionStorage and advertising tags. In this Policy, “cookies” covers all of these.
Storing and accessing information on your device (except what is strictly necessary) requires your prior consent (Art. 5 of Law No. 41/2004 and Art. 6(1)(a) GDPR).
2. How we manage consent
When you first visit the website, a banner appears with the options:
- Essential only
- Customise (analytics and marketing off by default; you can turn them on and save)
- Accept all
Non-essential tools load only after your consent. You can change or withdraw consent at any time via the “Cookie settings” / “Definições de cookies” link in the website footer.
Your choices are stored in localStorage (cookie-consent, cookie-consent-date) with no technical expiry; 12 months after the recorded date, the banner asks for your choice again. You can also clear the website’s data in your browser.
3. Categories
3.1. Necessary (always on)
They enable basic operation, security and your essential preferences. They cannot be switched off.
| Name / technology | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Bot protection / security | ~30 minutes |
cookie-consent, cookie-consent-date | Aura (first-party) | Store your cookie choices and the date of those choices | No expiry (localStorage); asked again after 12 months |
language | Aura | Language preference | No expiry (localStorage) |
aura_guest_details, aura_hike_guest_details | Aura | After a booking, store name, email and phone only on your device to prefill future booking forms (see Privacy Policy, section 3.12) | No expiry (localStorage), until you delete them in your browser |
| Supabase session keys | Aura (Supabase) | Sign-in to the admin area; never set for visitors | Until sign-out (localStorage) |
3.2. Analytics (only with consent)
Help us understand how the website is used, in aggregated form.
| Tool | Provider | What it does | Typical identifiers |
|---|---|---|---|
| Google Analytics 4 (G-2M1284FC2Z) | Page views, events, technical data (including IP truncated per configuration) | Cookies _ga, _ga_* · proposed retention: 14 months | |
| Microsoft Clarity (xj6s5r1pxh) | Microsoft | Heatmaps and session recording (on-page interactions) | Clarity cookies (_clck, _clsk, etc.) |
| Own statistics | Aura (Supabase) | Path, referrer, user-agent, session ID, screen, language, duration, clicks | analytics_session_id (sessionStorage, deleted when the tab closes); set only after consent |
| Traffic source | Aura | Keep URL campaign parameters (UTM) to attach them to a booking if you make one | aura_utm (sessionStorage, deleted when the tab closes); requires consent |
3.3. Marketing (only with consent)
Used to measure campaigns and show relevant advertising.
| Tool | Provider | What it does | Typical identifiers |
|---|---|---|---|
| Meta Pixel (ID 4368803220050807) | Meta | Website events (for example PageView, Lead, Schedule) | _fbp, _fbc; own helpers evt-click-*, pixel-fired-*, hike-pixel-* (sessionStorage, prevent duplicate events; deleted when the tab closes) |
| Meta Conversions API | Meta (via our server) | Server-side events with email/phone hashed SHA-256, IP, user-agent and _fbp/_fbc | No additional own cookie; uses Pixel cookies |
| Google Maps (iframe) | Embedded map on contact/boutique pages | Google cookies on maps.google.com |
4. Transfers and further information
Several providers (Google, Meta, Microsoft, Cloudflare, Lovable) may process data in the US. Details on transfers, legal bases and rights: Privacy Policy, sections 6 to 9.
5. How to control cookies in the browser
Besides our settings, you can block or delete cookies in your browser settings. If you block necessary cookies, parts of the website may stop working. You may also use the providers’ opt-out tools (for example Meta’s ad settings or the Google Analytics opt-out add-on), without prejudice to our banner.
6. Changes and contact
We may update this Policy. The current version is at auratavira.com/cookies. Contact: info@aurawines.pt.