Cookie Policy

Last updated: 22 October 2026

Necessary storage

The site may use csrftoken for form protection and sessionid for the website session. These are separate from optional measurement cookies.

The first-party cretessence_consent cookie on .cretessencevillas.com stores your choice for 13 months and shares it across cretessencevillas.com and its subdomains (including lagkada.cretessencevillas.com and makrygialos.cretessencevillas.com). The cookie uses Path=/, SameSite=Lax and Secure (HTTPS only). A localStorage copy on each site mirrors the cookie; the cookie is the source of the current choice.

Before consent

Before Accept, Google tag libraries may load and send consent-state and measurement pings without analytics cookies through data.cretessencevillas.com. Optional Google Maps and external font services do not load at this stage.

After Accept

GA4 uses _ga and _ga_LD970RTJWZ to distinguish browsers and sessions. The first-party measurement service can set FPLC and server-set HttpOnly FPID. Cookie expiry depends on the current settings and your browser; the 14-month Analytics retention setting is not the lifetime of every cookie.

Maps and external services

Google Maps loads only after Accept and when requested or in view. A plain “Open in Google Maps” link remains available and navigates to Google under its own terms.

Where a YouTube embed is offered, the frame from youtube-nocookie.com loads only after Accept. A placeholder is shown before that. The separate watch link opens YouTube only when you select it, under Google’s terms and privacy policy. Withdrawing consent reloads the page and restores the placeholder instead of the video.

After Accept, the Adobe Fonts stylesheet can load for the site’s typography. Before consent the existing self-hosted Lato and Noto Serif Display fonts are used; fonts injected by Maps are loaded only with Maps.

reCAPTCHA v2 checkbox starts only on interaction with a form, even if you declined analytics. It is used for form security, with Google’s Privacy Policy and Terms.

Change or withdraw consent

Use “Cookie settings” in the footer or below to reopen the choice. Moving from Accept to Decline clears JavaScript-accessible _ga*, _gid, _gat*, _gcl_*, _gac_*, FPLC, FPAU, FPGCL*, FPGSID, _dc_gtm_*, _gaexp*, _fbp, _fbc, __utm* and _uet* cookies on the host and parent domains, then reloads the page. The list also covers cookies that may remain from earlier settings; not all of them are used today.

FPID is HttpOnly and cannot be deleted by page JavaScript. It remains until browser expiry or removal through your browser settings. You can also clear the site’s other cookies and local storage there.