Cookie Policy

A cookie is a small text file a site asks your browser to keep and send back on the next request. The law that governs it covers any storage of, or access to, information on your device — so this policy also covers the browser's localStorage and sessionStorage, and scripts loaded from another company's servers, because requesting them reveals your IP address even when they store nothing.

A first-party item is set on livinglocal.ai and can only be read by this site. A third-party item belongs to another company's domain. Note that both Google Analytics and PostHog write first-party cookies — they sit on our domain, but the data they identify is transmitted to Google and to PostHog respectively, which is why they still require your consent. PostHog also keeps a copy of the same identifier in localStorage, which has no expiry date of its own; withdrawing your consent clears both.

On your first visit a banner appears. Until you act on it, every optional category stays switched off — nothing is pre-ticked, and scrolling, clicking a link or simply carrying on browsing is never treated as agreement.

• Accept all and Reject all sit side by side on the first screen, as equally weighted buttons. Refusal is one click, exactly like acceptance.
• Manage preferences opens a panel where you decide category by category. Strictly necessary cookies are shown as locked on, because the site cannot be delivered without them.
• Closing the banner without choosing stores nothing and grants nothing. The banner simply asks again on your next visit.

Your decision is stored in a first-party cookie called ll_consent. It holds one true/false value per category, the moment you decided, how you decided (accept all, reject all, a custom selection, or a withdrawal), the site it applies to and the version number of the consent configuration — nothing that identifies you. It is set with Path=/, SameSite=Lax and Secure over HTTPS, and is readable by this site only; it is never transmitted to a third party.

We also send Google's Consent Mode signals. Every one of the six optional signals is set to denied before any Google code can run — only security_storage, which is strictly necessary, is granted — and all of them are updated the instant you decide. Signalling alone is not enough, so we also block the container outright: Google Tag Manager is not requested at all until you agree to at least one optional category.

We ask again if you have not decided, if you clear your cookies, after about six months, or whenever we add or change one of the tools listed below. A version change never silently carries a previous "yes" over.

With your consent we load Google Tag Manager, which in turn runs Google Analytics 4. We use it to see which destinations, pages and experiences people actually look at, whether search and the quiz lead anywhere useful, and which booking links get clicked.

Google receives your IP address, browser and device characteristics, the page addresses you visit and the interactions we send as events — including what you type into the site search, the answers you give in the trip quiz, and, when you open a booking link, which experience it was. When you use the AI assistant we send the length of your message and never its content. The same events go to PostHog, described below — with the search term and any error text removed first, so PostHog learns that you searched but not what for.

Google is a group established in the United States, so consenting to analytics involves a transfer of data outside the European Economic Area. The safeguards for that transfer, and how long Google keeps the data, are in the Privacy Policy under Transfers outside the EEA and How long anything is kept.

The same consent also loads PostHog, a second analytics tool we use for the same purpose from a different angle: how a visit actually unfolds — the order pages are opened in, where a search or the quiz is abandoned, which cards get clicked. It receives your IP address, your browser, the page addresses you visit and the interactions we choose to record. It is configured to record only those interactions, not to capture every click on the page automatically. It is not started at all until you grant the analytics category, so before that it stores nothing and is never contacted.

PostHog stores that data on its European infrastructure, on servers in Frankfurt, Germany, and acts on our behalf and on our instructions. That does not remove the transfer question, and it is worth being precise about why: PostHog Inc. is established in the United States, and its own published list of providers includes Cloudflare for edge routing, whose locations Cloudflare determines across its worldwide network. The safeguards are in the Privacy Policy under Transfers outside the EEA. PostHog publishes no fixed retention period for product analytics data, so the Privacy Policy states what we set rather than quoting a figure of theirs.

If you grant neither optional category, none of the above happens: the container is never requested, no event is sent, and the events our own code would otherwise queue are discarded rather than held back and delivered later. Because the container also hosts any future advertising tag, granting Advertising on its own loads it as well — which is why that category's description says so.

If you withdraw after having accepted, we signal denied, delete the analytics cookies described above, remove the entries PostHog keeps in your browser's localStorage — otherwise the identifier would survive the cookie and a later opt-in would resume the same visitor — and reload the page so that the scripts already running in it are removed rather than merely silenced: a script once loaded cannot be unloaded any other way. Other tabs you have open pick the withdrawal up and do the same.

Photos, map tiles and the home-page background video are served straight from the systems that hold them rather than copied through our servers. No cookie or other storage is involved and no consent is required for delivering the content you asked for, but your browser does make the request — which necessarily discloses your IP address, your user agent and, in general terms, the page you were on. You are entitled to know who that is:

• OpenFreeMap (Hyperknot Software Kft.)

  Hosts contacted

  tiles.openfreemap.org

  Why

  Supplies the vector map tiles shown on activity pages, and is operated by Hyperknot Software Kft., a company registered in Hungary. Your browser fetches the tiles directly, which discloses your IP address and browser to it. No cookie or other storage is involved. Its published policy is that it does not log IP addresses by default, but that it may switch IP logging on for up to 30 days to investigate a security incident or misuse; anonymised logs without IP addresses are kept indefinitely.

• Cloudflare, Inc. (CDN in front of the map tiles)

  Hosts contacted

  tiles.openfreemap.org

  Why

  Delivers those same map tiles as OpenFreeMap’s content delivery network, so it is Cloudflare — not OpenFreeMap’s own servers — that answers your browser first and receives your IP address. Cloudflare is a US company operating a worldwide network, and OpenFreeMap publishes no statement about which country the tiles are served from. No cookie or other storage is involved.

• GetYourGuide

  Hosts contacted

  cdn.getyourguide.com

  Why

  Hosts the activity photos supplied by GetYourGuide. Images load straight from its CDN, so your IP address and browser are disclosed to it.

• Viator / Tripadvisor

  Hosts contacted

  hare-media-cdn.tripadvisor.com, media.tacdn.com, dynamic-media.tacdn.com

  Why

  Hosts the activity photos supplied by Viator and Tripadvisor — the majority of the photography on this site. Images load straight from its CDN, so your IP address and browser are disclosed to it.

• Headout

  Hosts contacted

  cdn-imgix.headout.com

  Why

  Hosts the activity photos supplied by Headout. Images load straight from its CDN, so your IP address and browser are disclosed to it.

• Unsplash

  Hosts contacted

  images.unsplash.com

  Why

  Hosts part of the editorial and illustrative photography used on our own pages.

• Google Cloud Storage

  Hosts contacted

  storage.googleapis.com

  Why

  Google Cloud Storage holds the images and the home-page background video we store ourselves. Serving them discloses your IP address and browser to Google as our storage provider.

• Vercel Blob (legacy image host) *

  Hosts contacted

  *.public.blob.vercel-storage.com

  Why

  A storage service we used for images before moving them to Google Cloud Storage. An older stored image address could still point here, in which case serving it would disclose your IP address and browser to Vercel.

• Vercel Inc.

  Hosts contacted

  livinglocal.ai

  Why

  Hosts and serves this website from a data centre in Frankfurt, Germany. Like any web server it processes the technical data of each request, including your IP address, on our behalf and on our instructions.

• PostHog (PostHog Inc.)

  Hosts contacted

  eu.i.posthog.com, eu-assets.i.posthog.com

  Why

  Measures how the site is used, once you allow analytics: which pages you open, in which order, and the interactions we have chosen to record. Your browser sends those events to it directly, which discloses your IP address and browser to it as well. It processes them on our behalf and on our instructions, on PostHog’s European infrastructure with servers in Frankfurt, Germany. PostHog names Cloudflare among its own providers for edge routing, and Cloudflare decides which of its worldwide locations handles the traffic, which is why PostHog also appears in the transfer table below.

* Declared because the current configuration could still reach it, although we have not observed it in use. It is listed rather than omitted so that this table errs towards telling you more.

Four more recipients never touch your device, because only our server contacts them: Google's Gemini API, which generates the AI assistant's replies; our own recommendation service, which runs on Google Cloud and turns your quiz answers into suggestions; a hosted Redis at Upstash, which holds the two-minute counter that stops the assistant being flooded; and Neon, which hosts the read-only catalogue database this site queries. All four are described in the Privacy Policy.

Booking links to GetYourGuide, Headout and Viator/Tripadvisor carry our affiliate and campaign parameters, so the partner knows the booking came from us — see the Privacy Policy. They travel inside the link itself and the links are marked as sponsored. What the partner's own site then stores on your device is governed by the partner's cookie policy, which its own banner will present to you.

Withdrawing is as easy as consenting, and always available: choose Cookie settings here or in the footer of any page, then either switch a category off or use Reject all. It takes effect immediately.

When you withdraw, we record the new choice, tell Google that consent is denied, and expire the analytics cookies that were set on our own domain. If Google's container is already running in the page, we reload it — that is the only way to get a loaded script off the page, so expect the page to refresh and anything you had in progress, such as an open chat, to start again. Anything a third party stored on its domain is outside our reach: use your browser's controls below to clear it. Withdrawal applies from that moment on; it does not undo processing that was lawful while your consent was in place.

Your choice is stored per browser and per device, so making it again elsewhere is expected. It also disappears if you clear your cookies — including with a browser setting that clears them on exit, in which case you will see the banner on every visit.

Independently of the choice you make here, your browser can block or delete cookies, including ones already set. Be aware that blocking strictly necessary cookies breaks things: the site will no longer remember your privacy choice, so the banner reappears on every page.

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge
• Opera

Google also publishes a browser add-on that opts you out of Google Analytics everywhere, and the European advertising industry runs Your Online Choices for advertising opt-outs.

"Do Not Track" and Global Privacy Control

This site does not act on the "Do Not Track" or Global Privacy Control signals your browser may send. The choice you express in our banner is what governs this site — and because nothing optional loads until you actively agree, sending one of those signals and doing nothing else leaves you in exactly the state they are meant to achieve.

If we add, remove or repurpose a tool we update the tables above and raise the version number of the consent configuration. When that version covers something you have not agreed to, your stored choice stops being valid and the banner asks you again, with every optional category off. The configuration is currently at version 2, in force since 12 August 2026; the text of this page was last revised on 12 August 2026. Rewording the page does not re-open a choice you already made — only a change to the tools themselves does that.

Questions about anything on this page, or about the wider processing it belongs to? Write to privacy@instal.com, or read the Privacy Policy, which covers the same tools in their full context and lists your rights.