Cookie notice
EFFECTIVE 2 SEPTEMBER 2026 · VERSION 1.0
Analytics cookies are optional. Rejecting them does not block the website or portal. We place analytics storage only after an active “accept” choice, and you can change your mind at any time.
1. What cookies are
Cookies are small values stored by your browser. Similar browser storage, such as session storage, is covered by the same choice here. Necessary storage keeps requested features secure or remembers a choice; analytics storage helps us understand how the public site is used.
2. Cookies we use
| Name | Category | Purpose and information | Duration |
|---|---|---|---|
| __Host-cc-consent | Necessary | Remembers a pseudonymous consent receipt and whether analytics was accepted. It is Secure, HttpOnly and first-party. | 180 days |
| __Host-cc-analytics | Analytics | Pseudonymous first-party analytics identifier. Set only after analytics consent; not used if the consent receipt is absent or withdrawn. | 180 days or until withdrawal |
| cc_analytics_session | Analytics browser session storage | Random session identifier used to group events during one browser tab session. Created only after consent. | Until withdrawal or the tab session ends |
| __Secure-cbp | Necessary, portal only | Signed login session for the partner portal. Contains account role/identifier, expiry and a CSRF value; not the password. | 7 days |
| __Secure-cbp2fa | Necessary, portal only | Short-lived signed state while completing two-factor login. | 5 minutes |
| __Secure-cbpenroll | Necessary, portal only | Short-lived signed state while enabling two-factor authentication. | 10 minutes |
| cbptheme | Necessary preference, portal only | Remembers light or dark mode requested by the signed-in user. | 1 year |
3. What our analytics records
With consent, our own database records the event name, pseudonymous analytics and session IDs, page path, referrer origin, and limited campaign tags. We do not use advertising pixels, do not create cross-site profiles, and do not store raw IP addresses in the analytics tables.
4. Other websites
Our fonts and analytics are first-party. Clicking the Cal.eu booking link or Instagram takes you to another service with its own cookies and privacy terms. A click does not allow those services to place cookies on the Crimson website.
5. Change or withdraw your choice
. Reject and accept are offered with equal prominence. Withdrawal stops new analytics events and removes the analytics cookie and session identifier. You can also delete cookies in your browser.
To remove analytics already collected for this browser, use Delete this browser’s analytics. The remaining necessary preference is simply “analytics off”, without a unique identifier. Choices apply separately on each hostname/browser. For other processing, read our privacy notice.