Cookie Policy
Effective 29 September 2026 · version 2.0
This policy lists what the website stores in your browser (cookies, local storage, cache), what for and for how long. It is based on Romanian Law 506/2004 (ePrivacy) and the GDPR. How we process personal data is explained in the Privacy Policy.
1. What a cookie is
In short
A cookie is a small text file the website stores in your browser. The browser’s local storage (localStorage, sessionStorage) and cache work similarly. Below we list everything this website uses.
2. Needed for the site to work (no consent)
Without these the service you asked for would not work
These need no consent because they are strictly necessary for the service you explicitly requested (Art. 4(6) of Romanian Law 506/2004).
- cookie-consent-v2 (local storage) — remembers your cookie choice. Until you clear it or the categories change.
- sb-…-auth-token (cookie, Supabase) — signing in to the booking portal (and the admin area). Only created when you sign in. At most 400 days; removed when you sign out.
- sb-…-auth-token-code-verifier (cookie, Supabase) — security of the sign-in link (PKCE). Until sign-in completes.
- admin_2fa_verified (cookie) — admin area only: two-step verification has been completed. 12 hours.
- siteDetailsDismissed:… (session storage) — in the portal, remembers that you closed the site-questionnaire reminder. Until you close the tab.
- Service worker and cache (browser) — for faster loading and limited offline use, the browser keeps the pages you visited and some responses. On a shared device, sign out after using the portal. At most 24 hours.
3. Statistics (only with consent)
What we use only if you accept
- exi_session (cookie) — a pseudonymous identifier our own visitor statistics use to link one visitor’s events. Only created after you accept; removed if you decline. 1 year.
- Vercel Web Analytics (script, no cookies) — aggregate measurement of page views. Loaded only after you accept. —
- Vercel Speed Insights (script, no cookies) — measurement of page loading speed. Loaded only after you accept. —
4. Marketing
None
We use no advertising or tracking cookies (for example Facebook, Google Ads).
5. External connections without cookies
Supabase
The booking calendar loads availability, and the gallery its images, directly from the Supabase server (EU, Ireland). This sets no cookies, but your browser’s IP address reaches the server. Fonts are served from our own server, with no connection to Google.
6. How to change your choice
Cookie settings
You can change your choice at any time: the button below or the “Cookie settings” link in the footer brings the cookie banner back. In your browser settings you can also delete all data the site has stored.
Szilveszter Izolda-Hajnalka (EXI Moments) · Fabricii nr.6, Miercurea-Ciuc, 530153, Harghita, Romania · +40 754 638 350 · hello@exi-moments.ro