Cookie policy
Last revised 12 October 2026.
This policy says exactly what this website stores in your browser, who set it, what it is for and how long it stays. Nothing beyond the strictly necessary list runs until you say so, and you can change your answer at any time from the link in the footer.
What this covers
A cookie is a small file a website asks your browser to keep. Local storage and session storage do the same job by other means. This policy treats all of them the same way and calls them all cookies.
It sits alongside the privacy policy: this page is about storage on your device, the privacy policy is about what happens to personal data afterwards.
Your choices
On your first visit a panel appears with two equal options, Accept all and Reject all, and a link to choose category by category. Nothing in the analytics or advertising categories loads while you are deciding, and closing the panel without answering is not treated as agreement.
Your answer is kept in this browser for six months, then you are asked again. It is stored on your device only and does not identify you. Clearing this site's data in your browser resets it.
Turning a category off after it has run tells the tag to stop and deletes the cookies it set, as far as your browser allows.
The categories
The full table of every cookie, who sets it and how long it lasts is generated from the same list the cookie panel uses, and is shown below this text.
Strictly necessary. The choice you made on the cookie panel, and Cloudflare's security cookies. These need no consent because the site cannot work without them.
Analytics. Google Analytics 4, if it is ever switched on. Off until you allow it.
Advertising. The Meta pixel, if it is ever switched on. Off until you allow it.
Companies we link to
Cloudflare serves the site. Instagram, WhatsApp and Google Maps are plain links: nothing loads from them until you follow one. Fonts, images, stylesheets and scripts are all served from this site, so ordinary reading leaks nothing to a third party.
Controlling cookies yourself
Whatever you choose here, your browser has the final say. You can block or delete cookies for this site or for every site.
Changes
If a category is added, or an existing one starts doing something different, everyone is asked afresh rather than being held to an old answer. The date at the top of this page is the last time it was revised.
Every cookie, by category
Generated from the same list the cookie panel uses, so this table cannot drift from what the site loads.
Strictly necessary
These are the only things this site stores without asking, because it could not work without them: keep the network in front of the site secure, and remember the answer you give on this panel so you are not asked again on every page. None of them profiles you, and nothing they store is sold or shared for advertising.
Lawful basis: No consent is needed: this storage is strictly necessary to provide the site you asked for.
| Name | Type | Set by | What it does | Lasts |
|---|---|---|---|---|
bonnies-consent | Local storage | Bonnie’s | Records the choice you made on the cookie panel, and when you made it. | 6 months |
cf_clearance | Cookie | Cloudflare | Records that your browser passed a security check, so you are not challenged again. | Up to 30 minutes |
__cf_bm | Cookie | Cloudflare | Tells automated traffic from people, so the site cannot be flooded. | 30 minutes |
Analytics
Google Analytics 4 would tell us how many people came, which pages held them and where they came from, so the site can be made better. It stays off until you switch it on, and switching it off again tells the tag to stop and deletes the cookies it set. Google truncates IP addresses before storing them, and this data is not used to advertise to you.
Lawful basis: Your consent. You can withdraw it at any time from the link in the footer.
| Name | Type | Set by | What it does | Lasts |
|---|---|---|---|---|
_ga | Cookie | Google Analytics | Tells one browser from another, so a return visit is not counted as a new person. | 2 years |
_ga_* | Cookie | Google Analytics | Holds the state of the current visit for one measurement id. | 2 years |
_gid | Cookie | Google Analytics | The same job as _ga, over a single day. | 24 hours |
Advertising
The Meta pixel would tell Facebook and Instagram that you visited, so an advert can be credited with the visit and shown to people with similar tastes. It stays off until you switch it on. Switching it off tells the pixel to stop and deletes the cookies it set, though Meta keeps whatever it already received under its own policy.
Lawful basis: Your consent. You can withdraw it at any time from the link in the footer.
| Name | Type | Set by | What it does | Lasts |
|---|---|---|---|---|
_fbp | Cookie | Meta | Identifies your browser to Meta, so a visit can be attributed to an advert. | 3 months |
_fbc | Cookie | Meta | Records the advert click that brought you here. | 3 months |
Companies whose domains your browser talks to
- Cloudflare
The network the site is served from, and the check on the admin sign-in.
Sets a security cookie when it has to check a browser, and keeps short-lived request logs. It builds no advertising profile.
- Instagram, WhatsApp and Google Maps
Where the links to follow us, message us and find us go.
They are plain links, not embeds. Nothing loads from any of them until you follow one, and what happens after that is under their own policies.
Contact
Bonnie's Café & Lounge, Bingin, Uluwatu, Bali.