LEGAL
Cookie Policy
Cookie Policy
Last updated: August 31, 2026
CaptainBook I.K.E.
Petrou Protopapadaki 13, 84300 Naxos, Greece
Contact: info@captainbook.io
Effective date: 1 September 2026 for accounts created on or after that date; 1 October 2026 for accounts existing before it, together with the Terms and Conditions and the Privacy Policy (Terms §21.15).
1. What this Policy covers
This Policy explains how CaptainBook uses cookies and similar technologies, including local storage, pixels, tags and software development kits, and how you can control them.
It covers:
captainbook.io and our other marketing websites; and
the CaptainBook web application that operators sign in to.
It does not cover an operator's own website. Where you meet a CaptainBook booking widget, a hosted checkout or the AI Sales Assistant on a tour operator's site, that operator is the operator of the website for cookie purposes and is responsible for its own cookie banner, notice and consent. See Section 7 and Appendix G of the Terms and Conditions.
This Policy forms part of our Privacy Policy, which explains what we do with personal data more generally.
2. What a cookie is
A cookie is a small text file placed on your device when you visit a website. It lets the site remember things about your visit, such as that you are signed in, which language you chose, or how you found the site. We also use technologies that work like cookies: local storage, which keeps information in your browser; pixels, small images that record that a page was opened; and tags, snippets of code that load other services.
Wherever this Policy says "cookies", it means all of these.
3. The categories we use
3.1 Strictly necessary, always on
These make the site and the application work. Without them you could not sign in, stay signed in, or complete a booking. They are set on the basis of the ePrivacy exemption and our legitimate interests, and do not require consent.
NameSet byPurposeStorageDurationSession identifierCaptainBookKeeps you signed inCookieSessionCSRF tokenCaptainBookProtects forms against cross-site request forgeryCookieSessionLoad-balancer affinityCaptainBookKeeps you on the same server during a visitCookieSessionframerCookiesConsentModeCaptainBookRemembers your cookie choice, so we do not ask again on every pageLocal storageUntil clearedRate-limiting and abuse-detection identifiersCaptainBookSecurity and fraud preventionCookieSessionCart and checkout stateCaptainBookKeeps a booking in progressCookieSession
Remembering that you declined is itself a strictly necessary cookie. Without it we would have to ask you again on every page.
3.2 Functional, consent required
Remember choices you have made, so the site behaves the way you left it: language, currency, region and interface preferences. Declining these does not break the site, but it will forget your preferences between visits.
3.3 Analytics, consent required
Help us understand how the site and the application are used, so we can fix what is broken and improve what is not.
NameSet byPurposeStorageDuration_gaGoogle AnalyticsDistinguishes one visitor from anotherCookie400 days_ga_<container>Google AnalyticsHolds the analytics session state for our propertyCookie400 daysajs_anonymous_idCustomer.ioRecognises a returning visitor so activity joins up across visitsCookie and local storage365 daysajs_user_idCustomer.ioAssociates activity with a known contact once identifiedLocal storageUntil clearedmp_<token>_mixpanelMixpanelProduct analytics, including which features are used, and in what orderLocal storageUntil cleared__mpq_<token>_evMixpanelQueues analytics events not yet sentLocal storageUntil clearedlastExternalReferrer, lastExternalReferrerTimeMixpanelRecords how you arrived at the siteLocal storageUntil cleared_hj*HotjarSession recording and heatmaps, including recognition of a session and whether it is being recordedCookie and local storageUp to 365 days
Hotjar records your interaction with the page, including mouse movement, scrolling and clicks. It is configured to suppress the content of form fields. Hotjar records only a sample of sessions, so its storage is not set on every visit. It is set only with your consent and you can withdraw that consent at any time.
Google Tag Manager loads several of the tags above. It does not itself set a cookie.
3.4 Marketing, consent required
Measure our advertising and let us reach people who have shown interest in CaptainBook.
NameSet byPurposeStorageDuration_fbpMetaIdentifies a browser to Meta so we can measure our campaigns and reach similar audiencesCookie90 days_gcl_auGoogleAttributes a sign-up or enquiry to the advertisement that led to itCookie90 days_gcl_lsGoogleThe same attribution data, held in local storageLocal storageUntil cleared
The Meta Pixel involves sharing information with Meta Platforms Ireland Limited, which uses it for its own purposes as well as ours. These are set only with your consent.
3.5 Support and messaging, in the application
NameSet byPurposeStorageDurationgist.web.*Customer.ioRuns in-application messaging and keeps your conversation historyLocal storageUntil clearedIntercom session and identifier cookiesIntercomRuns in-application chat and keeps your support history so you do not have to repeat yourselfCookieUp to 9 months
3.6 Keeping this list accurate
Cookie names and durations change when a provider updates its software. The names above were verified on 31 August 2026. Where a provider sets a cookie we have not listed, it belongs to the category its purpose fits, and the rules in Section 4 apply to it in the same way. Tell us at info@captainbook.io if you find one that is not described here.
4. How we ask, and how you choose
4.1 When you first visit, a banner asks how you want non-essential cookies handled. Nothing in the functional, analytics or marketing categories is set until you make a choice.
4.2 You can:
Accept all: every category is set;
Reject all: only strictly necessary cookies are set. Rejecting takes no more effort than accepting; both are a single click on the first screen of the banner;
Customize: choose category by category.
4.3 Continuing to browse, scrolling, or closing the banner is not consent. Until you choose, only strictly necessary cookies are set. We record your choice so we do not ask again on every page.
4.4 You can change your mind at any time through the Cookie settings link in the footer of every page. Withdrawing consent is as easy as giving it, and takes effect immediately for anything set afterwards.
4.5 Consent is asked for again if our cookie use changes materially, and in any case no less often than every 12 months.
5. Managing cookies in your browser
You can also control cookies in your browser by blocking them, deleting them, or being warned before one is set. Every major browser publishes instructions, usually under Settings → Privacy.
Blocking strictly necessary cookies will stop parts of the Service working, including signing in.
Many browsers and operating systems offer a Global Privacy Control or equivalent signal. Where it is technically feasible, we honour recognised opt-out signals on our own website.
6. Cookies set by others
Some cookies described here are set by third parties under their own privacy notices, not by us:
Google: policies.google.com/privacy
Mixpanel: mixpanel.com/legal/privacy-policy
Intercom: intercom.com/legal/privacy
Customer.io: customer.io/legal/privacy-policy
Framer: framer.com/legal/privacy-policy
Some of these providers process data outside the European Economic Area. Where they do, the transfer is made under the European Commission's Standard Contractual Clauses or another safeguard under Chapter V of the GDPR. Section 8 of the Privacy Policy explains this.
7. If you are a tour operator using CaptainBook
Where you embed our booking widget, a hosted checkout or the AI Sales Assistant on your own website, you are the operator of that website for cookie and ePrivacy purposes. You are responsible for:
displaying a compliant cookie banner and privacy notice on your own site;
obtaining and recording consent where your visitors' jurisdiction requires it;
configuring any consent management platform so that non-essential tags are gated; and
disclosing the cookies set by the widget and by any tag you deploy.
Where you enable Google Tag Manager, Google Analytics 4, advertising pixels or any other tag through the Service, those tags are deployed under your own accounts and your own contracts. They are not CaptainBook sub-processors. We provide the technical means; we do not review or monitor what you deploy. See Appendix G of the Terms.
8. Changes
Cookie names, providers and durations change over time. This Policy is the current reference, and the version published here always applies. Where a change materially alters what we set or why, we will ask for consent again.
9. Questions
info@captainbook.io, marked "Cookies". You may also complain to the Hellenic Data Protection Authority: www.dpa.gr.
