Cookies and Local Storage Policy
Last updated: September 13, 2026
Plain summary
The public site currently sets no advertising, remarketing, profiling or third-party analytics cookies. It does not use a persistent identifier to follow you between visits.
What is stored
Your browser may keep only the fact that you dismissed the language reminder in localStorage (sdf-lang-nudge). It prevents repetition and does not identify you. The restricted staff console uses essential Supabase authentication cookies and may store language and theme. Secure console access cannot work without them.
Cookieless metrics
The application may send aggregate events — page view, booking click, planner use and form submission — with route, language, referrer domain, campaign and country supplied by infrastructure. It stores no IP, analytics cookie or device identifier in those events. See the Privacy Policy for purpose, legal ground and rights.
Third parties
Facility, WhatsApp, maps, social networks and payment providers open only after your action. They may then use cookies under their own policies. A link does not let San Diego Flats read that third party's cookies.
Future changes
Google Analytics, advertising pixels and other non-essential technologies are not active. Before activation, this policy will be updated and, where required, consent and refusal controls will be equally easy. You can clear local storage in browser settings.
International visitors
The accommodation and contract are supplied in Brazil, but we honour mandatory foreign rules when applicable to processing or offers directed to residents there. People in the EEA, UK or Switzerland may, where applicable, exercise access, correction, erasure, restriction, portability, objection and local supervisory-authority complaint rights. Residents of US states with an applicable law may request access, correction, deletion and a copy and may opt out of sale, sharing or targeted advertising. We currently neither sell personal data nor use behavioural advertising. We do not discriminate for exercising rights. Before enabling ads or trackers, we will adopt prior blocking, choice and withdrawal controls, an appropriate CMP where required and Global Privacy Control support.