Cookie Policy
Last updated: 9 July 2026 · Effective date: 9 July 2026
This page explains the cookies and similar technologies we use, why we use them, and how you stay in control. We keep it short and honest, in line with your rights under Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP) and UU ITE.
1. What cookies are
Cookies are small text files a website stores in your browser. They let a site remember things between page loads — for example your cookie choice or theme. Similar technologies (such as local storage, pixels, and tags) do comparable jobs and we treat them the same way in this policy.
2. Consent, and where you are browsing from
What runs before you touch the cookie banner depends on the country you are browsing from. Google determines that from your IP address, on its own servers, using Google Consent Mode v2.
- European Economic Area, the United Kingdom, and Switzerland — nothing non-essential runs until you choose Accept. Google Analytics is held in a fully denied state, so it stores no cookies and cannot recognise you across pages or visits.
- Everywhere else — for example Australia, the United States, Singapore, Japan, and Indonesia — Google Analytics starts as the page loads and sets its cookies straight away. Here the banner works as an opt-out: choosing Necessary only switches Google Analytics off and deletes the analytics cookies already stored on your device.
Meta (Facebook), TikTok, and Microsoft Clarity never run before you press Accept — in any country. Their scripts are not even downloaded until then, so those companies receive nothing about your visit unless you have accepted.
While Google Analytics is in a denied state it may still send Google a cookieless signal that a page was viewed. It carries no cookie and no identifier we or Google can use to recognise you later. In that same state we also instruct Google to redact advertising click identifiers.
We respect the privacy signal built into your browser. If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat it as an automatic decline everywhere in the world, the banner never appears, and you do not need to click anything. If you switch that signal on after accepting here, your earlier acceptance is revoked on your next page load. The only exception is an acceptance you give while the signal is already on — we take that as a deliberate choice for this site and keep it.
3. Cookies we use
| Name | Provider | Purpose | Retention | Category |
|---|---|---|---|---|
| buv-consent | Book Ubud (first-party) | Remembers that you accepted; your choice — accept or decline — is also kept in your browser’s local storage | 6 months | Necessary |
| _ga | Google Analytics 4 | Distinguishes visitors | 2 years | Analytics (set on arrival; only after consent in the EEA / UK / CH) |
| _ga_WTBP35LE23 | Google Analytics 4 | Keeps session state | 2 years | Analytics (set on arrival; only after consent in the EEA / UK / CH) |
| _clck | Microsoft Clarity | Persistent visitor id (heatmaps / session replay) | 1 year | Analytics (after consent) |
| _clsk | Microsoft Clarity | Ties pageviews into one session | 1 day | Analytics (after consent) |
| _fbp | Meta (Facebook) | Ad attribution; only set when we run Meta / Facebook ads | 3 months | Marketing (after consent) |
Microsoft Clarity and Meta cookies are only placed once
you accept, wherever you are. The Google Analytics cookies are held back
until you accept in the EEA, the United Kingdom, and Switzerland; anywhere
else they are written when the page first loads. Choosing Necessary only stops all of them and expires the ones already on your device — Google
(_ga, _ga_*, _gid, _gat*, _gcl_*, _gac_*), Microsoft Clarity (_clck, _clsk), Meta (_fbp, _fbc)
and TikTok (_ttp). If a provider is not active (for
example, when no Meta / Facebook or TikTok ad campaign is running),
its cookie is never set.
Local storage we use
Besides cookies, we keep a few small values in your browser’s local storage. These are not cookies: they stay on your device, are never attached to a request to our server, and are never shared with a third party.
| Key | Set by | Purpose | Lifetime |
|---|---|---|---|
| buv-consent | Book Ubud (first-party) |
Stores your answer to the cookie banner — granted
or denied — so we do not ask again, and so analytics
and marketing stay off if you declined
| Until you clear it |
| buv-consent-gpc | Book Ubud (first-party) | Records whether you pressed Accept while Global Privacy Control / Do Not Track was already switched on, so that deliberate choice is not revoked on your next page load. Removed when you choose Necessary only. | Until you clear it |
| theme | Book Ubud (first-party) | Remembers whether you chose the light or the dark version of the site | Until you clear it |
| villa-view-mode | Book Ubud (first-party) | Remembers whether you were browsing the villas as a grid or as a list | Until you clear it |
4. How to manage cookies
- Use the “Cookie settings” link in the site footer to review or change your choice at any time. Choosing Necessary only there stops analytics and marketing and deletes the cookies they had already set.
- Turn on Global Privacy Control or Do Not Track in your browser — we read it as an automatic decline, and it also revokes an acceptance you gave before switching it on.
- Clear or block cookies in your browser settings. Each browser (Chrome, Safari, Firefox, Edge) has its own privacy controls.
- Install the Google Analytics opt-out browser add-on to stop Google Analytics across all sites.
Blocking or clearing site storage in your browser resets the preferences we keep for you locally — your light / dark theme, your grid / list view choice, and your answer to the cookie banner (so it will ask again).
5. More information
For how we collect, use, and protect your personal data, please read our Privacy Policy.