Legal
Cookie Policy
Last updated 23 August 2026
This policy explains the cookies used on cape-boat.com — what each one does, how long it lasts, and how you can refuse it.
What cookies are
Cookies are small text files that a website asks your browser to store. They let a site recognise the same browser from one page to the next. We use “cookies” here as shorthand for cookies and the related browser storage technologies, such as localStorage and sessionStorage — although, as set out below, this site uses neither of those.
A cookie is called first-party when it is stored under the address of the site you are visiting, and third-party when it is stored under another company’s address. Every cookie on this site is first-party.
Who we are
This website is operated by Boating charter and service d.o.o. (“Cape Boat”, “we”, “us”), which runs private boat tours on the Croatian Adriatic. We are the data controller for the personal data described in this policy.
- Registered name: Boating charter and service d.o.o.
- Registered address: Migalovica 12A, Vodice
- OIB (Croatian identification number): 54802360295
- Email: info@cape-boat.com
- Phone: +385 91 933 4289
Cookies we use
The table below lists every cookie this website can set. It was compiled by auditing the site’s own source code and by loading the live site and inspecting what the browser actually stored.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| __rum_sid | HyperDX (first-party) | Groups the pages you view into a single monitoring session, so an error or a slow page load can be traced back to one visit. Holds a randomly generated identifier and a timestamp — nothing you type, and nothing that identifies you by name. Set only after you accept analytics cookies. | 15 minutes, extended while you keep browsing; 4 hours maximum | Analytics |
| cookieyes-consent | CookieYes (first-party) | Remembers which cookie categories you accepted or refused, so the banner does not ask again on every page, and holds a consent ID that is our record of the choice you made. Set by the consent banner itself. | 1 year | Strictly necessary |
| __cf_bm and related | Cloudflare (first-party) | May be set by the provider that hosts and serves this site, to tell human visitors from automated traffic and to keep the site available. Set at the network level rather than by anything on the page. | Up to 30 minutes | Strictly necessary |
| _ga, _ga_*, _gcl_au | Google (first-party) | Google Analytics and Google Ads measurement. Not currently set. Our tag container publishes no such tags today, and our consent defaults block Google storage in any case. Listed so that this table remains accurate if that ever changes. | Not applicable while unset | Analytics / advertising |
This site stores nothing in localStorage or sessionStorage, and sets no cookies of its own beyond those listed above.
Google Tag Manager and Consent Mode
We use Google Tag Manager (container GTM-KR5RSGHG), a tool that lets us add or remove measurement tags without changing the site’s code. Tag Manager itself sets no cookies.
It is loaded only after you accept analytics cookies. Until you do, your browser makes no request to Google at all — the script is never fetched, so there is nothing for it to run.
As a second layer, the site sets Google Consent Mode v2 to deny every storage signal — ad_storage, ad_user_data, ad_personalization, analytics_storage, functionality_storage and personalization_storage — before anything else runs. Your choices on the banner are what update those signals. Any Google tag that does load therefore stores nothing on your device unless you have permitted it.
At the time of writing, our container publishes no tags at all: no data is sent to Google Analytics or Google Ads. Loading the live site confirms it — no Google cookie is created, and no measurement request is made.
Site monitoring
We use HyperDX, a monitoring service, to find out when pages break or load slowly. It records JavaScript errors, page-load timings, and a replay of how the page rendered and was navigated. This is how we catch faults that visitors would otherwise have to report to us.
The recording is configured to protect what you type: all text entered into form fields is masked before anything is sent, and the contents of requests and responses are not captured. The details you submit through the enquiry form — your name, email address, phone number and message — are therefore not recorded by the monitoring service. They are sent to us by email, and nowhere else.
HyperDX is what sets the __rum_sid cookie described above, and it starts only once you have accepted analytics cookies. If you refuse them, the monitoring service is never loaded and no session is recorded.
What we do not use
For the avoidance of doubt, this website does not use:
- Advertising, remarketing or profiling cookies.
- Social media tracking pixels. Our Facebook, Instagram, TikTok and WhatsApp links are ordinary links — they set nothing until you click one and leave our site.
- Third-party web fonts. All text is displayed in fonts already installed on your device.
- Embedded maps, videos or third-party booking widgets.
- Any external booking engine. Enquiries reach us by email only.
- Cross-site tracking of any kind.
Your choices
On your first visit, a cookie banner asks which categories you are willing to accept. Nothing outside the strictly necessary category is loaded until you answer, and refusing is exactly as easy as accepting. Strictly necessary cookies cannot be switched off, because the site cannot work without them.
You can change or withdraw your choice at any time: select Manage cookies at the bottom of any page to reopen the banner. Withdrawing consent takes effect immediately for anything not yet loaded, and fully once you move to the next page.
Independently of the banner, your browser’s own controls also work:
- Block or delete cookies for
cape-boat.comspecifically, in your browser’s site settings. - Block all cookies, or set your browser to clear them when you close it.
- Use a private or incognito window, which discards cookies when the window is closed.
Instructions for each major browser: Chrome, Safari, Firefox and Edge.
Refusing these cookies will not stop you using any part of this site. Browsing, reading tour details and sending an enquiry all work without them.
Legal basis and your rights
Strictly necessary cookies are used on the basis of our legitimate interest in keeping this site secure and available (Article 6(1)(f) GDPR). Non-essential cookies require your consent (Article 6(1)(a) GDPR, together with the ePrivacy Directive as implemented in Croatia by the Electronic Communications Act).
We collect that consent through the banner described above, and keep a record of it — the consent ID in the cookieyes-consent cookie — so that we can show what you agreed to and when.
Under the GDPR and the UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw your consent at any time. To exercise any of these rights, email us at info@cape-boat.com.
You also have the right to complain to a supervisory authority. In Croatia that is the Personal Data Protection Agency, AZOP (azop.hr). In the United Kingdom it is the Information Commissioner’s Office, ICO (ico.org.uk).
California privacy rights
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you rights over your personal information.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA. We offer no financial incentives in exchange for personal information, and we do not knowingly collect information from anyone under 16.
You have the right to know what personal information we collect and why, to request its correction or deletion, and not to be treated differently for exercising those rights. Email info@cape-boat.com to make a request.
International transfers
HyperDX and Google are based in the United States, and CookieYes operates from India and the United States, so the limited monitoring and consent data described above may be processed outside the European Economic Area. Those transfers rely on the European Commission’s Standard Contractual Clauses, together with the EU–US Data Privacy Framework where the provider takes part in it.
This website is served by Cloudflare. Enquiries you send us are delivered through Resend and held in our mailbox at Zoho Mail.
Changes to this policy
We update this policy whenever the tools used on the site change. The date at the top shows when it was last revised.
Contact us
If you have any question about this policy or about cookies on this site, email info@cape-boat.com or call +385 91 933 4289.