Cookie Policy

Last updated: October 2026

This page lists every cookie this website uses and what each one is for. It sits alongside our Privacy Policy , which explains how we handle personal information more generally. Have both reviewed by a qualified professional for your specific legal obligations before publishing the site.

What cookies are

A cookie is a small file that a website asks your browser to store. Cookies set by this site are called first-party cookies; cookies set by another company whose code runs on a page, Google, in our case, are called third-party cookies. The same rules apply to similar technologies such as pixels and browser local storage, and everything on this page covers those too.

How this site uses them

We use cookies for two things: to make the site work and keep the contact form free of spam, and, only with your consent, to measure how the site is used so we can improve it.

For measurement we use Google Tag Manager, which loads and manages our measurement tags, and Google Analytics 4, which records pages viewed, approximate location derived from your IP address, device and browser type, and interactions such as which tour pages you open, how far you scroll and whether you submit the contact form. Google Tag Manager does not set cookies of its own; Google Analytics does, and they are listed below.

We also run our own measurement service, and the data it collects is processed on our measurement server at bot.kromagency.es. It records the pages you open during a visit and how you reached the site, such as the campaign link you followed, so we can see which pages and campaigns lead to inquiries. It is only loaded once you have given consent: only then does it set its cookies, _kb and _kbs, and keep the kb_s and kb_q entries in your browser’s session storage, which are deleted when you close the tab. Without your consent nothing of it is stored in your browser and nothing is sent to it.

We do not use advertising, remarketing or cross-site tracking cookies, and we do not build advertising profiles about you.

The cookies we use

Strictly necessary

These are needed for the site to work and to stay free of spam. They are set without asking, because the site cannot do its job without them.

Strictly necessary cookies: name, provider, purpose and duration
Name	Provider	Purpose	Duration
`ssi_consent`	Secret Spots of Iceland	Stores which cookie categories you accepted, so the banner does not ask again on every page and we can prove what you agreed to. It holds nothing but your choices and the date you made them.	12 months
`_GRECAPTCHA`	Google	Set when the contact form loads, so Google reCAPTCHA can tell a person apart from an automated script and keep spam submissions out.	6 months

Analytics and measurement

These tell us how visitors find and use the site, in aggregate. They are only set once you have given consent, and you can withdraw it at any time.

Analytics and measurement cookies: name, provider, purpose and duration
Name	Provider	Purpose	Duration
`_ga`	Google Analytics	Assigns a randomly generated identifier to your device so that repeat visits are counted as one visitor rather than several.	2 years
`_ga_<container ID>`	Google Analytics	Keeps session state, so a visit is measured as a single session instead of restarting on every page you open.	2 years
`_kb`	Secret Spots of Iceland	Our own measurement service: a randomly generated identifier that recognises your browser when you come back, so an inquiry can be traced to the visits and campaign that led to it.	395 days
`_kbs`	Secret Spots of Iceland	Our own measurement service: keeps the pages you open during one visit together as a single session.	30 minutes
`kb_s`	Secret Spots of Iceland	Our own measurement service, in your browser’s session storage rather than a cookie: a randomly generated identifier for the current visit.	Until you close the tab
`kb_q`	Secret Spots of Iceland	Our own measurement service, in session storage: holds measurement records that could not be sent yet, so they can be retried instead of lost. If the record waiting is a contact form submission, it includes the name, email address and phone number you entered until it is sent.	Until you close the tab

Changing or withdrawing your consent

You can reopen your cookie choices at any time and change or withdraw what you agreed to. Withdrawing consent stops any further analytics collection; it does not delete what was already collected, which you can ask us to erase using the rights described in our Privacy Policy.

You can also delete or block cookies in your browser settings, every major browser lets you do this per site, or install Google's opt-out browser add-on to switch off Google Analytics on every site you visit. Blocking strictly necessary cookies may stop the contact form from working.

Do not sell or share my personal information

We do not sell your personal information for money, and we do not share it for cross-context behavioural advertising or targeted advertising, as those terms are used in US state privacy laws such as the California Consumer Privacy Act. We run no advertising or remarketing tags on this site, so there is no advertising opt-out for us to apply.

We do use Google Analytics, which some US state laws treat as a "sale" or "share" even when no money changes hands. If you would rather we did not, turn off analytics in your cookie settings above. That is the opt-out, and it takes effect immediately. If you are a resident of a US state with its own privacy law, you can also email or call us using the details in our Privacy Policy to exercise your rights to know, delete, or correct your information, and we will not treat you differently for asking.