Cookie notice

Last updated: 21 October 2026

1. What is a cookie?

A cookie is a small text file that a website stores in your browser and that your browser sends back on your next visit. It lets the website know, for example, that you are signed in. The browser's local storage (such as sessionStorage) serves a similar purpose; in this notice we call these cookies too.

2. Which cookies do we use?

Besides the cookies that are strictly necessary for the website to work, www.sanctuary.hu uses Google Analytics cookies for visitor statistics, but only if you accept them in the cookie banner. We use no advertising, social media or other tracking cookies, and we show no embedded content that would set them.

Strictly necessary cookies need no consent (Article 5(3) of the ePrivacy Directive, 2002/58/EC, and the Hungarian law implementing it). The related processing is based on performance of a contract and on our legitimate interest in running the website securely (GDPR Art. 6(1)(b) and (f)).

Our own cookies

sanctuary-guest – keeps you signed in so you can book and use your account. Created only when you sign in. Lifetime: 30 days, or until you sign out.
sanctuary-pay-back (in the browser's session storage) – remembers which page to return to after paying. Lifetime: until you close the browser tab.
sanctuary-consent – remembers whether you accepted or rejected analytics cookies, so that we do not ask on every page. Lifetime: 6 months; then we ask again.

Analytics cookies (only with your consent)

Google Analytics (_ga, _ga_…) – count visits and show which pages are read, where visitors come from (for example a search engine) and on what kind of device, so that we can improve the website. Google does not store your IP address, and we cannot identify you from these data. Set only after you click "Accept" in the cookie banner. Lifetime: 2 years. Provider: Google Ireland Limited (see our Privacy notice). More: policies.google.com/technologies/cookies.

Legal basis: your consent (Article 5(3) of the ePrivacy Directive; GDPR Art. 6(1)(a)). Rejecting them changes nothing else on the website. You can withdraw your consent at any time with Cookie settings at the bottom of every page; we then delete the analytics cookies. Withdrawal does not affect the lawfulness of the processing before it.

Studio staff only (in the admin)

These are created only when a staff member signs in to /admin; they never reach guests' browsers.

payload-token – the staff member's sign-in. Lifetime: 12 hours, or until sign-out.
payload-lng – the language of the admin. Lifetime: 1 year.
sanctuary-as-staff – marks that an administrator is viewing the admin as another staff member. Lifetime: at most 2 hours.

Third-party cookies

Cloudflare (__cf_bm, cf_clearance) – the website's traffic passes through Cloudflare's network, which may set these cookies to filter out bots and attacks. Lifetime: __cf_bm 30 minutes, cf_clearance up to a few days. More: www.cloudflare.com/cookie-policy.
Stripe – online payments take place on Stripe's own pages (checkout.stripe.com, billing.stripe.com), where Stripe uses its own cookies for payment security and fraud prevention. These are set on Stripe's pages, not on our website. More: stripe.com/cookies-policy.

3. Deleting and blocking cookies

You can delete or block cookies in your browser settings at any time. If you block strictly necessary cookies, signing in and booking will not work; you can still browse the pages.

Chrome: support.google.com/chrome/answer/95647
Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
Safari: support.apple.com/guide/safari/sfri11471/mac
Edge: support.microsoft.com/microsoft-edge

4. Contact

You can read how we handle personal data in our Privacy notice. Questions: connection@sanctuary.hu.

If we ever introduce other cookies that are not strictly necessary, we will do so only with your prior consent, and we will update this notice first.