Last updated: 2026-08-24 · Version v1.3

Cookie Policy

1. Do We Use Cookies?

Yes — we use a small number of optional analytics cookies, and a small amount of similar browser storage, alongside our existing cookieless analytics. We do not use advertising cookies, retargeting cookies, or any cookies that build advertising profiles or track you across other websites.

2. Your Choices

When you first visit the site, a banner asks whether you accept optional analytics cookies and similar browser storage. You can:

• Accept — optional analytics cookies and attribution measurement are enabled for this browser.
• Decline — only strictly necessary storage is used. The site works fully.

Your preference is saved in your browser’s localStorage.

You can change or withdraw your choice at any time using the Cookie settings link in the footer of any page. It reopens this choice, shows which option is currently active, and takes effect immediately — you do not need to clear your browser data. Changing your preference to decline analytics cookies prevents further use of analytics cookies and stops attribution measurement; cookies already set may remain on your device until they expire or you remove them through your browser, and the attribution entry described in section 3b is deleted straight away. Your preference is stored per browser, so a different browser or device will ask again.

3. Cookies and Browser Storage We Use

3a. Strictly Necessary (no consent required)

We store your analytics consent preference in localStorage under the key cookie_consent. This is a simple text value (accepted or declined), stays on your device, and is not transmitted to any server.

3b. Attribution measurement (consent required)

With your consent, we store one further entry in your browser’s localStorage recording how you reached the site: campaign tags in the link you followed (the utm_ values), any advertising click identifier the link carried, the website that linked to you, and the page you arrived on. It stays on your device. If you send a booking request or an enquiry, that information is sent with it and kept alongside the request, so we know which sources bring travellers to the site.

We consider this information current for 30 days. After that we stop using it, and it is removed the next time you visit the site. Browser storage has no built-in expiry, so if you never return the entry may remain in your browser until you or your browser clear it — you can remove it at any time through your browser’s site-data settings.

If you decline, or withdraw a previous acceptance, nothing is stored, nothing is read, and any existing entry is deleted straight away. Information already attached to a booking request you sent us is part of that request’s record and is kept under the retention periods in our Privacy Policy.

3c. Analytics — Plausible (no consent required)

We use Plausible Analytics — a cookieless, privacy-first analytics tool. Plausible:

• Does not set any cookies or use local storage.
• Does not collect personal data or IP addresses.
• Does not track you across websites.
• Is GDPR-compliant without requiring consent.
• Stores anonymised aggregate data on EU servers.

See Plausible’s data policy.

3d. Analytics — Google Analytics 4 (consent required)

With your consent, we use Google Analytics 4 (GA4) to understand which pages are visited and how visitors use the site. GA4 sets the following first-party cookies:

GA4 data is processed by Google LLC under a Data Processing Agreement. Data is used solely to understand aggregate site usage. This website does not use advertising cookies, remarketing tags or advertising-personalisation signals, and we do not use Google Analytics for advertising purposes. Data may be transferred to and processed in the United States under the EU–US Data Privacy Framework.

We implement Google Consent Mode v2: analytics consent defaults to denied for every visitor, and the advertising signals are never granted. If you decline, the cookies listed above are not stored or accessed, although limited cookieless measurement may still be processed by Google in accordance with our consent settings.

You can also opt out globally using the Google Analytics Opt-out Browser Add-on.

4. Third-Party Payment Cookies

When you pay a reservation deposit, you are redirected to a Stripe-hosted checkout page. Stripe may set cookies for fraud prevention and session management under their own cookie policy. We have no access to or control over those cookies.

5. Contact

Questions about cookies or your data: hello@surfcampsportugal.pt

See also our Privacy Policy for full details on data processing.