Last updated and technically reviewed: August 10, 2026
This policy supplements our Privacy Policy. “Cookies” also covers local storage, pixels, tags, and similar browser technologies.
1. Worldwide default
Security, cart, booking, payment, and form functions remain available. Google may send limited cookieless measurement signals while consent is denied. Analytics and advertising cookies and all non-Google optional services stay disabled until you allow them. No optional service is preselected.
2. Essential technologies
| Name or family | Purpose | Typical period |
|---|---|---|
aam_klaro_20260810enr2 |
Stores your privacy choices and policy version on this hostname. | 180 days |
wp_consent_* |
Synchronises the choice with the WordPress Consent API. | Approximately 30 days |
woocommerce_cart_hash, woocommerce_items_in_cart |
Detects cart changes. | Session |
wp_woocommerce_session_* |
Connects the browser with its server-side cart. | 2 days |
woocommerce_recently_viewed, store_notice* |
Requested shop features when enabled. | Session |
__cf_bm |
Cloudflare bot detection and protection when applied. | 30 minutes of inactivity |
cf_clearance and similar challenge cookies |
Remembers successful security checks. | Based on the security challenge |
WordPress, WooCommerce, WooCommerce Bookings, forms, and payment providers may also create a session cookie, anti-forgery token, or security identifier when you use the relevant function. These are not used for advertising.
3. Optional services
With consent denied, Google may receive cookieless pings containing the consent state and limited page/request metadata for aggregate measurement and conversion modelling. These pings do not use analytics or advertising cookies, persistent advertising identifiers, URL passthrough, or non-Google tags.
| Service | Possible data or storage after consent | Indicative period |
|---|---|---|
| Google Analytics 4 and Google Ads through Stape/GTM | _ga, _ga_*, _gid, _gcl_au, campaign identifiers, pages, and events. |
_ga and _ga_*: up to 2 years; other periods depend on configuration. |
| Microsoft Advertising | _uetvid, _uetsid, and campaign or conversion information. |
Session to approximately 13 months, depending on the cookie. |
_epik, _derived_epik, _pin_*, _pinterest_*, and campaign events. |
Up to 1 year, depending on Pinterest. | |
| Crisp Live Chat | crisp-client/*, conversation content, technical information, and information you enter. |
Up to 6 months; an active support conversation may be retained longer by Crisp. |
| YouTube, Google Maps, social, or review embeds | Requests, IP address, browser information, and provider-controlled cookies when you load the content. | Determined by the provider and your account with it. |
4. Google Consent Mode v2
Before Google tags load, analytics_storage, ad_storage, ad_user_data, and ad_personalization are set to denied. In this advanced mode, Google tags may send limited cookieless pings while those signals remain denied. They change to granted only when you allow full analytics and advertising. Ads data redaction is enabled and URL passthrough is disabled while consent is denied; Microsoft, Pinterest, Meta, chat, and other optional services do not load.
5. Rejecting, withdrawing, GPC, and DNT
Reject is as easy as Accept. Rejecting keeps all four Google consent signals denied, prevents analytics and advertising cookies, and blocks non-Google optional services; limited Google cookieless measurement continues. You can choose by purpose and reopen settings from the orange desktop control or mobile footer link. Withdrawal immediately updates consent signals, removes known optional first-party cookies where accessible, and reloads the page when needed.
A Global Privacy Control or Do Not Track signal blocks the Google/Stape loader as well as optional analytics and advertising, even if Accept All was previously selected. Choices are not shared across language subdomains.
6. Receipt and renewal
The versioned choice receipt is stored in your browser. It is not linked to a full IP address in a central consent database. Configuration versions and test evidence are retained. The choice expires after 180 days and is requested sooner if purposes or this policy change materially.
7. Contact
Questions or rights requests: contact@absolute-adventure-mexico.com. See Your Privacy Choices for regional opt-out and request information.