COOKIE POLICY — bananatribe
Site: https://bananatribe.com
Included subdomains: https://my.bananatribe.com
Controller: bananatribe
Address: C. de la Platanera, 4 - 38400 Puerto de la Cruz - Tenerife
Privacy contact: hello@bananatribe.com
1. Privacy preferences
The iChef component stores the choice in the browser via localStorage (key vp_choice_25937991-9ae9-4a2c-afd5-e2645fa4d8c6), for six months. It sends an event to the site log with a random browser identifier, choice, date and configuration version.
Log retention: by iChef. This text describes the criterion declared by the controller; the deletion of logs must be carried out according to this criterion.
2. Declared services
Cloudflare
Provider: Cloudflare, Inc.
Declared category: necessary
Cookies / identifiers: _cfuvid, cf_clearance
Duration / retention: Session / Up to 12 months
Provider policy: https://www.cloudflare.com/privacypolicy
Cloudflare Bot Management
Provider: Cloudflare, Inc.
Declared category: necessary
Cookies / identifiers: __cf_bm
Duration / retention: 30 minutes
Provider policy: https://www.cloudflare.com/privacypolicy
iChef — Consent Management
Provider: iChef (Visibility S.L.U.)
Declared category: necessary
Cookies / identifiers: vp_choice_<site_id> (localStorage)
Duration / retention: 6 months (180 days)
Provider policy: https://ichef.it/policy/33009ebe-df24-4452-bac9-c4034b143c39?type=privacy
Contact Form
Provider: bananatribe
Declared category: necessary
Cookies / identifiers: None
Duration / retention: Request handling time
Provider policy: https://ichef.it/policy/25937991-9ae9-4a2c-afd5-e2645fa4d8c6?type=privacy
App Registration and Login
Provider: bananatribe / Supabase, Inc.
Declared category: necessary
Cookies / identifiers: sb-*-auth-token, sb-*-auth-token-code-verifier (localStorage)
Duration / retention: Active session (until logout)
Provider policy: https://supabase.com/privacy
Language and Theme Preferences
Provider: bananatribe
Declared category: functionality
Cookies / identifiers: i18nextLng, theme / vite-ui-theme (localStorage)
Duration / retention: Persistent (until deletion)
Provider policy: https://ichef.it/policy/25937991-9ae9-4a2c-afd5-e2645fa4d8c6?type=privacy
Guest Status, Zone and Invitations
Provider: bananatribe
Declared category: necessary
Cookies / identifiers: bananatribe_guest_zone, bananatribe_ref (localStorage / sessionStorage)
Duration / retention: Session / Local persistent
Provider policy: https://ichef.it/policy/25937991-9ae9-4a2c-afd5-e2645fa4d8c6?type=privacy
Interactive Maps (OSM)
Provider: OpenStreetMap Foundation
Declared category: functionality
Cookies / identifiers: HTTPS tile requests and graphics cache
Duration / retention: Session
Provider policy: https://osmfoundation.org/wiki/Privacy_Policy
PWA Cache and Push Notifications
Provider: bananatribe
Declared category: necessary
Cookies / identifiers: workbox-precache, PushSubscription (Cache Storage / IndexedDB)
Duration / retention: Until revocation or cache cleanup
Provider policy: https://ichef.it/policy/25937991-9ae9-4a2c-afd5-e2645fa4d8c6?type=privacy
Brevo
Provider: Sendinblue SAS
Declared category: marketing
Cookies / identifiers: No direct cookies on the user's device. (Brevo uses invisible web beacons / pixels inside sent emails to track open statistics and link clicks).
Duration / retention: Contact data (email) is retained until user unsubscription (opt-out) or account deletion.
Provider policy: https://www.brevo.com/it/legal/privacypolicy/
3. Preference management
You can accept, reject or choose optional services from the banner. Declared necessary services do not depend on the choice. You can reopen the panel via “Privacy preferences” and revoke consent. With Google Consent Mode Advanced, Google signals are updated without reloading the page; before consent and after rejection, cookieless measurement signals remain possible. Statistical and advertising cookies depend on the respective choices. The component attempts to remove declared accessible cookies; for other services already loaded, it may be necessary to reload the page. It does not delete data already transmitted to providers. Positive choices are applied after the event is recorded.
The activation of optional services after consent requires that scripts and iframes have been integrated with the component and tested by the controller.
4. Further information
For purposes, legal bases, recipients, transfers and rights, consult the privacy policy associated with this site.

