Cookie policy
Controller
This policy explains how Horas Enigmáticas, Unipessoal, Lda. (corporate tax number 516 947 753), based at Av. Amália Rodrigues, n.º 18, 3.º Dt.º, 2650-437 Amadora, owner of the BeachFront Living brand, uses cookies and similar technologies on beachfront.pt.
Preferences
Manage your consent
01
What cookies and similar technologies are
Cookies are small text files stored on your device when you visit a website. We also use your browser’s local storage and session storage (localStorage and sessionStorage), which work similarly. This policy refers to all of them as “cookies”.
Essential (strictly necessary) cookies are always active because they are indispensable to the site. All others are activated only after you accept them, under Portuguese Law 41/2004 of 18 August and the GDPR. Until then, Google tools are not loaded and your browser does not contact Google.
02
Cookie categories
We group cookies into four categories, matching the settings panel. You can accept or reject each category except essential cookies.
Essential cookiesAlways active
They keep the website running and allow you to browse it, so they are always active. They store your cookie choice and the language you browse in, and protect payments against fraud. They are not used for analytics or advertising.
Data collected: Your cookie choice with a random identifier and date; browsing language; booking-area access and payment result; device data collected by Stripe to prevent payment fraud; and technical signals used by Cloudflare to distinguish visitors from bots.
Legal basis: Necessary for the website and the service you request, such as booking and payment (Portuguese Law 41/2004 of 18 August, Article 5(2)).
Cookies: cookie_consent, bf-checkout-draft:*, bf-confirmation:*, bf-checkout-pending-confirmation, bf-favorites, bf-map-seen, NEXT_LOCALE, bf_reservation_session, bf-confirmacao, bf-pagamento, __cf_bm, cf_clearance, __stripe_mid, __stripe_sid.
Analytics cookiesOnly with your consent
They help us understand how the website is used: how many people visit, where they come from and which pages they view. The information is aggregated and used to improve the website. We use Google Analytics, which only loads if you accept this category.
Data collected: A random browser identifier, pages visited, visit duration, device type and approximate location based on IP address.
Legal basis: Your consent (Portuguese Law 41/2004, Article 5(1); GDPR, Article 6(1)(a)).
Cookies: _ga, _ga_*.
Functionality cookiesOnly with your consent
They let us show content from other services on the website, such as the Google Maps map showing where the Bayline Condominium is. When the map loads, Google receives your IP address and may store its own cookies. If you do not accept this category, the map only appears if you choose to load it.
Data collected: IP address and browser data received by Google when the map loads.
Legal basis: Your consent (Portuguese Law 41/2004, Article 5(1); GDPR, Article 6(1)(a)).
Cookies: NID.
Advertising cookiesOnly with your consent
They measure the results of our Google Ads and Meta (Facebook and Instagram) campaigns — for example, whether a booking started with an ad — and help show more relevant ads on other websites and social networks. They are only used if you accept this category.
Data collected: Browser and advert-click identifiers and actions on the site, such as a completed booking (amount and reference). For completed bookings, Meta also receives the email, phone, name and country provided, hashed in the browser (SHA-256), to link the booking to adverts. With automatic advanced matching, Meta may also receive, hashed, the name, email and phone number entered in the site’s forms, even before a booking is completed.
Legal basis: Your consent (Portuguese Law 41/2004, Article 5(1); GDPR, Article 6(1)(a)).
Cookies: _gcl_au, _gcl_aw, _fbp, _fbc, bf_purchase_*.
03
Cookies used
BeachFront Living11
Cloudflare2
Meta (Facebook and Instagram)2
Launch review: the inventory includes planned tools and items awaiting confirmation. Actual presence, names, domains and durations will be verified against installed integrations. Optional cookies should only activate after the corresponding choice.
Inventory storage types
- cookie_consent: Local storage.
- bf-checkout-draft:*: Session storage.
- bf-confirmation:*: Session storage.
- bf-checkout-pending-confirmation: Session storage.
- bf-favorites: Local storage.
- bf-map-seen: Local storage.
- NEXT_LOCALE: HTTP cookie.
- bf_reservation_session: HTTP cookie.
- bf-confirmacao: HTTP cookie.
- bf-pagamento: HTTP cookie.
- __cf_bm: HTTP cookie.
- cf_clearance: HTTP cookie.
- __stripe_mid: HTTP cookie.
- __stripe_sid: HTTP cookie.
- _ga: HTTP cookie.
- _ga_*: HTTP cookie.
- _gcl_au: HTTP cookie.
- _gcl_aw: HTTP cookie.
- _fbp: HTTP cookie.
- _fbc: HTTP cookie.
- bf_purchase_*: Session storage.
- NID: HTTP cookie.
View cookie inventory
| Name | Domain | Provider | Category | Purpose | Duration |
|---|---|---|---|---|---|
| cookie_consent | beachfront.pt (local storage) | BeachFront Living | Essential cookies | Stores your cookie choice, with an identifier, date and policy version (local storage). | 12 months |
| bf-checkout-draft:* | beachfront.pt (session storage) | BeachFront Living | Essential cookies | Temporarily keeps the details you typed at checkout (name, email, phone, special request and tax details) so they are not lost if you reload the page. Card details are never stored. | 1 hour, or until you close the tab |
| bf-confirmation:* | beachfront.pt (session storage) | BeachFront Living | Essential cookies | Keeps the details shown on the confirmation page (name, extras and stay amounts) and the booking’s email, phone, name and country, which are only sent to Meta if you have accepted advertising cookies. | Until you close the tab |
| bf-checkout-pending-confirmation | beachfront.pt (session storage) | BeachFront Living | Essential cookies | Lets the payment confirmation resume if the page is interrupted after paying. | Until you close the tab |
| bf-favorites | beachfront.pt (local storage) | BeachFront Living | Essential cookies | Keeps the apartments you saved as favourites in this browser. | Until you delete them |
| bf-map-seen | beachfront.pt (local storage) | BeachFront Living | Essential cookies | Remembers the apartments you have already looked at on the map, to tell them apart from the rest. | Until you delete them |
| NEXT_LOCALE | beachfront.pt | BeachFront Living | Essential cookies | Remembers the language you browse in. | Session |
| bf_reservation_session | beachfront.pt | BeachFront Living | Essential cookies | Temporarily keeps authenticated access to the booking area after validating the email and reference or opening the secure link received by email. | 30 minutes |
| bf-confirmacao | beachfront.pt | BeachFront Living | Essential cookies | Shows the confirmation page after payment, with the result confirmed by the server. | 2 hours |
| bf-pagamento | beachfront.pt | BeachFront Living | Essential cookies | Keeps the apartment, dates, number of guests and rate you chose, and the booking reference, while you pay, so that the confirmation page shows the right booking. | 2 hours |
| __cf_bm | beachfront.pt | Cloudflare | Essential cookies | Security: tells visitors apart from automated bots and protects the site against attacks. | 30 minutes |
| cf_clearance | beachfront.pt | Cloudflare | Essential cookies | Security: remembers that the browser has already passed an anti-bot check, so it is not repeated. | 30 minutes |
| __stripe_mid | beachfront.pt | Stripe | Essential cookies | Fraud prevention for payments. Only set at checkout. | 1 year |
| __stripe_sid | beachfront.pt | Stripe | Essential cookies | Fraud prevention for payments. Only set at checkout. | 30 minutes |
| _ga | beachfront.pt | Google (Google Analytics) | Analytics cookies | Distinguishes visitors using a random identifier. | 2 years |
| _ga_* | beachfront.pt | Google (Google Analytics) | Analytics cookies | Keeps the state of the visit: pages viewed and session length. | 2 years |
| NID | google.com | Google (Google Maps) | Functionality cookies | Stores preferences and helps protect Google services against abuse. Only set when the map loads. | Up to 6 months |
| _gcl_au | beachfront.pt | Google (Google Ads) | Advertising cookies | Links bookings to the ad campaigns they came from. | 90 days |
| _gcl_aw | beachfront.pt | Google (Google Ads) | Advertising cookies | Stores the identifier of a click on a Google Ads ad. | 90 days |
| _fbp | beachfront.pt | Meta (Facebook and Instagram) | Advertising cookies | Identifies the browser to measure and show Meta ads (Facebook and Instagram). | 90 days |
| _fbc | beachfront.pt | Meta (Facebook and Instagram) | Advertising cookies | Stores the identifier of a click on a Meta ad. | 90 days |
| bf_purchase_* | beachfront.pt (session storage) | BeachFront Living | Advertising cookies | Prevents the same booking from being counted twice when measuring campaigns. | Until you close the tab |
Google, Stripe and Meta cookies are stored on beachfront.pt but are created and read by those providers. Google, Stripe and Meta may process data in the United States under the EU–US Data Privacy Framework or European Commission-approved standard contractual clauses (see Privacy Policy, “Transfers outside the European Economic Area”).
This list is reviewed whenever the website starts using new tools.
04
Third-party services
Tools planned before launch
Meta Pixel (Facebook and Instagram) is already installed and described above, and requires advertising consent. Google (Analytics and Ads) and WhatsApp are planned integrations. Provider catalogues cover technologies that BeachFront may not use. The actual list depends on installed tools and does not mean all those cookies are active.
Google Analytics, Google Ads, Google Maps and any YouTube embeds. _ga, _ga_*, _gcl_*, _gac_*, NID, IDE, DSID, SOCS, YSC and PREF, depending on the integrated service.
View provider cookie catalogue / policyMeta — Facebook and Instagram
Meta Pixel, campaign measurement and any embedded content. _fbp and _fbc are already listed; other cookies or identifiers depend on the chosen integration.
View provider cookie catalogue / policyCustomer communications and any contact tools. WhatsApp’s policy lists wa_lang_pref on its own website, for example. A link to WhatsApp does not mean that cookie is created on BeachFront..
View provider cookie catalogue / policyFuture tools, including embedded content, pixels, local storage or IndexedDB, will have their names, purposes, categories, domains and durations added when configured. There is currently no confirmed information declaring these technologies active.
- Google Tag Manager — website tag management. Loaded only after accepting analytics or advertising cookies. It does not store its own cookies, but loads Google tools according to your consent.
- Google Analytics 4 and Google Ads — traffic analysis and campaign measurement, only with consent. Google policy: policies.google.com/privacy.
- Meta (Facebook and Instagram) — measuring and displaying adverts, only with advertising consent. Meta Pixel loads only after acceptance. It records page views and, on completed bookings, the amount paid and booking reference. For Meta to link the booking to adverts (advanced matching), it also sends the email, phone, name and country from the booking, hashed in your browser before transmission (SHA-256). It may also read the name, email and phone number entered in the site’s forms, even before a booking is completed, and send them to Meta, likewise hashed (automatic advanced matching). Without advertising cookie consent, none of this is sent. Meta policy: facebook.com/privacy/policy.
- Stripe — secure payment processing. Stripe policy: stripe.com/privacy.
- Google Maps — location map on the homepage. Loads only if you accepted functionality cookies or click “Show map”; Google then receives your IP address and may store cookies.
- OpenStreetMap — map images on search pages. Does not store cookies, but your browser sends its IP address to the map server to download them.
05
Manage and withdraw consent
You can accept, reject or withdraw consent at any time using the preferences panel above or “Cookie settings” in every page’s footer. Withdrawal does not affect the lawfulness of earlier processing.
Your choice is valid for 12 months. After that, or if this policy changes, we ask again.
If you believe your rights have not been respected, you may complain to the Portuguese Data Protection Authority (CNPD), Portugal’s supervisory authority.
You can also delete or block cookies in your browser settings. Blocking necessary cookies may prevent parts of the website, such as payment, from working.
To prevent Google Analytics data collection on all websites, you can install the Google Analytics opt-out browser add-on.
06
Contact
Horas Enigmáticas, Unipessoal, Lda.
Private limited company · Share capital: €50,000
Registered at Almada Commercial Registry under the single registration and corporate tax number 516 947 753
Registered office: Av. Amália Rodrigues, n.º 18, 3.º Dt.º, 2650-437 Amadora
