The short version
- We set one essential cookie to keep you signed in — that's it, by default.
- Google Analytics cookies are set only if you press Accept in our banner. Decline and no tracking runs.
- You can change your choice at any time with the button below.
What are cookies?
Cookies are small text files a website stores on your device. Some are needed for the site to work (like staying signed in); others are used for statistics. We also use your browser's local storage for one thing: remembering your cookie choice itself.
Exactly which cookies we use
This is the complete list — there are no others:
| Name | Type | Purpose | Lasts |
|---|---|---|---|
sb-…-auth-token(may appear split as .0, .1) | Essential | Keeps you signed in to your account. Set only when you log in. | Up to 400 days, refreshed while you use the site. Removed on sign-out. |
sb-…-auth-token-code-verifier | Essential | Secures the sign-in handshake (including Sign in with Google). | Minutes — removed as soon as sign-in completes. |
_ga | Analytics | Google Analytics 4 — distinguishes anonymous visitors. | 2 years. Set only after you press Accept. |
_ga_CXN08G00SM | Analytics | Google Analytics 4 — keeps visit/session state. | 2 years. Set only after you press Accept. |
cookie-consent(local storage, not a cookie) | Essential | Remembers whether you accepted or declined analytics. | Until you clear it or use the reset button below. |
How consent works here
On your first visit a banner asks you to Accept or Decline analytics cookies. Dismissing the banner counts as declining. We use Google Consent Mode v2 with everything set to “denied” by default — meaning Google Analytics stores nothing and sets no cookies unless and until you accept. Signing in, browsing, booking and every other feature of the site work exactly the same whether you accept or decline.
Change your choice
Withdrawing consent is as easy as giving it. Click the button below to reset your saved choice — the cookie banner will appear again and you can pick freshly:
Note: resetting stops future tracking. To also remove Google's existing _ga cookies, clear cookies for this site in your browser
(all major browsers: Settings → Privacy → Cookies → see data for rhodesthingstodo.com → remove).
Third-party requests that are not cookies
Some page assets load from third-party servers: the Jost font from Google Fonts, and map tiles from OpenStreetMap/CARTO when you open a map. Like any web request, those servers see your IP address when delivering the file, under their own privacy policies — but they do not set tracking cookies on this site.
More information
How we handle personal data in general — including your GDPR rights — is covered in our Privacy Policy. Questions? Contact us at info@rhodesthingstodo.com.