Cookies.

These entries do not identify you, are not sent to anyone and serve only to make the site work. We keep them in browser storage (localStorage / sessionStorage), not as cookies:

• -theme, prodaut-theme-source - your chosen theme (light / dark). Until you clear your browser data.
• -prodaut-consent - your decision from the cookie banner, so we do not ask again on every visit. Until you change it or clear your browser data.
• -prodaut-attribution - campaign parameters from the address you arrived at the site from (utm, gclid), attached to messages sent through the form. For the browser session only.

We count site traffic ourselves, with Umami software running on our own server in Poland. This tool neither stores nor reads anything in your browser: no cookies, no entries in localStorage or sessionStorage. That is why the banner does not ask about it - there is nothing to ask about.

Instead of an identifier stored on your device, our server computes a one-off hash of the IP address and browser header, with a random daily salt. The hash cannot be reversed, and once the salt changes the same person cannot be recognized the next day. We do not build profiles, do not track you across sites and do not pass this data to anyone - it stays on our server.

This is how we collect: the address of the page visited, the address of the page you came from, approximate location at country level, device and browser type, and clicks on the booking calendar, the e-mail address and form submissions.

After you click Acceptin the banner we start Google's tools. Until you do, Google tags run in cookieless mode (Consent Mode): they store no identifiers and do not link the visit to you as a person.

• -Google Analytics 4 - visit statistics. Cookies _ga (2 years) and _ga_* (2 years).
• -Google Ads - measuring which ads lead to enquiries. Cookies _gcl_au (3 months) and _gcl_aw (3 months) after arriving from an ad, plus other cookies of the _gcl_* family if Google adds them.

Consent from the banner covers the four Consent Mode v2 signals: storing analytics cookies (analytics_storage) and advertising cookies (ad_storage), sending user data for advertising purposes (ad_user_data) and ad personalisation (ad_personalization). In practice this also means that after you submit the form, an irreversible hash (SHA-256) of your e-mail address - not the address itself - goes to Google Ads, solely to match the enquiry to an ad click. Clicking Reject switches off all four signals and no data is sent.

These tools are provided by Google Ireland Ltd. Details: How Google uses cookies.

After you click Accept we also start Microsoft Clarity. The tool shows us where on the page people click and how far they scroll, and saves a replayable recording of the visit: cursor movement, clicks and scrolling. We use this solely to improve the page layout. Until you give consent, the Clarity script does not load at all - unlike the Google tags, there is no cookieless mode here.

• -_clck (1 year) - links successive visits from the same browser into one identifier.
• -_clsk (1 day) - groups page views within a single visit.
• -CLID, ANONCHK, MR, MUID, SM - cookies of the Microsoft domain, set when a recording is saved.

What the recording does not contain: the contact form fields - name, e-mail address and message content - are masked on our side, in the page code. The recording shows that someone is filling in the form, but not what they type. We also record nothing that happens outside our site.

The provider is Microsoft Ireland Operations Limited, and data may be processed outside the European Economic Area under standard contractual clauses. Details: Microsoft Clarity FAQ and the Microsoft Privacy Statement.

You can withdraw consent as easily as you gave it. Click below to reopen the banner. Cookies already stored can be removed in your browser settings.

More about how we process data is in the privacy policy.