Cookie Policy
This page describes the cookie and tracking policy used on Horseback Mongolia's website. It supplements our privacy policy.
What is a cookie?
A cookie is a small file stored on your device by the websites you visit. It allows us to store information related to your browsing (preferences, technical identifiers, audience statistics). The term "cookie" also covers other similar technologies (localStorage, sessionStorage, invisible pixels).
3 categories of cookies used
1. Essential Cookies (always active)
Required for the website to function: session management, security (CSRF protection), and remembering your cookie preferences. Without these cookies, you would not be able to fill out a contact form or receive a personalized response. They are exempt from consent (article 82 of the Data Protection Act).
2. Internal audience measurement (always active, consent-exempt)
We measure our website's audience using a proprietary internal tool developed by Nomadays, with no data sharing to third parties (Google Analytics, Meta, etc.). This measurement is exempt from consent under CNIL regulations as it meets the conditions of the broadened exemption :
- Data strictly necessary for producing anonymous statistics for our internal use only
- Ephemeral session identifier, with no linkage to a permanent identifier until you submit a form
- Truncated IP address (the last 8 bits of IPv4 or last 64 bits of IPv6 are removed before storage)
- No transmission to third parties or cross-site tracking
- Retention for a maximum of 13 months (CNIL ceiling for consent-exempt audience measurement)
Data collected : page views, session flow, traffic source (referrer, UTM), device type, technical performance (Core Web Vitals), JavaScript errors for debugging.
3. Detailed Statistics (enabled only if you consent)
If you accept the "Advanced Analytics" category in the cookie banner, we additionally enable:
- A permanent visitor identifier (13-month cookie) to track your journey across multiple sessions and improve our service
- Linking your browsing activity to your travel file if you create one
- Cross-domain tracking between our Nomadays sites (Nomadays collective only, never to third parties)
- Detailed behavior statistics (scroll depth, precise time spent)
None of this data is shared with third parties or used for advertising purposes.
4. Marketing & Personalization (enabled only with your consent)
If you accept the "Marketing" category in the cookie banner, we enable:
- Meta Pixel (Facebook Inc.) to measure the effectiveness of our campaigns on Meta and personalize our ads
- Google Ads / Google Analytics with advertising data sharing
These trackers set third-party cookies and transmit data to Meta and Google. You can withdraw this consent at any time using the floating cookie button at the bottom left of each page.
Manage your preferences
You can modify your choices at any time by clicking on the cookies icon at the bottom left of each page on our site. Withdrawing consent is just as easy as giving it : a single click is all it takes.
You can also disable cookies directly in your browser — see the help pages : Firefox, Chrome, Safari.
Retention Period
- Cookie preferences (your consent) : 6 months
- Exempt audience session identifier : 30 minutes of inactivity (sessionStorage)
- Anonymized audience data (page views, user journey) : 13 months
- Post-consent analytics visitor identifier : 13 months
- Third-party cookies (Meta, Google) post-consent marketing : duration set by third party (typically 90 days to 2 years)
- Consent audit log (legal proof) : 5 years after last modification
Your Rights
In accordance with the GDPR and the Data Protection Act, you may exercise your rights of access, rectification, erasure, objection, restriction and portability by contacting us via the contact form. You may also lodge a complaint with the CNIL.