Last updated: 15 August 2026
This policy explains how Canvilia uses cookies and similar technologies on canvilia.com, what each category does, how long information remains on your device and how you can manage your choices.
Cookies are small text files stored by your browser. Local storage and session storage are browser features that serve related purposes. Some are needed to keep the site secure and remember choices you make. Others help us understand how the site is used.
Visitors in the United Kingdom and European Economic Area see a consent banner before Analytics or Marketing storage is enabled. Strictly necessary technologies remain active because the site cannot provide the requested service without them.
You can accept all optional categories, reject all optional categories or choose them individually. To change or withdraw your choice later, select Cookie settings in the site footer. Withdrawing consent does not affect processing that took place before withdrawal.
You can also delete or block cookies through your browser. Blocking strictly necessary storage may prevent sign-in, payment return, language selection or other requested features from working correctly.
Outside the United Kingdom and European Economic Area, our current configuration may enable Analytics storage by default, subject to your browser settings and applicable law.
These technologies support security, authentication, consent records and a feature you have requested. They are not used to create an advertising profile.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | Canvilia | Remembers the language selected for the site | Browser session |
.AspNetCore.Identity.Application | Canvilia | Maintains an authenticated account session | Session, or up to 14 days if persistent sign-in is selected |
auth_present | Canvilia | Non-secret marker that tells the site an authenticated session is present | Matches the authentication-cookie lifecycle |
cookie_consent | Canvilia | Stores your Analytics and Marketing choices so the site can honour them | 182 days |
__cf_bm | Cloudflare, when triggered | Helps distinguish legitimate traffic from automated traffic | 30 minutes after inactivity |
cf_clearance | Cloudflare, when triggered | Remembers that a security challenge has been completed | The challenge period configured by Cloudflare |
Cloudflare may use other short-lived security cookies when a challenge, rate limit, waiting room or availability feature is triggered. Cloudflare describes these as strictly necessary for the requested security or delivery service.
These remember choices you actively make.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
preferred_currency | Canvilia | Remembers the currency in which you prefer to view prices | 1 year |
theme | Canvilia local storage | Remembers light or dark appearance | Until you remove it |
Canvilia uses browser session storage to preserve a checkout draft and non-sensitive payment-return references while you move between Canvilia and a payment page. This information normally disappears when the browser tab or session ends and may be removed earlier when the process completes. It does not contain full card details.
With Analytics consent, we use Google Analytics 4 to understand which pages and villas people use, how visitors reach Canvilia and whether the site works as expected.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes browsers for site-usage measurement | Up to 2 years, subject to browser limits |
_ga_XQT9MMZ2R9 | Google Analytics | Maintains session state for the Canvilia Analytics property | Up to 2 years, subject to browser limits |
When Analytics storage is denied, Google Analytics does not write or read these Analytics cookies. Canvilia uses advanced Google Consent Mode, so Google tags may still send cookieless measurement pings. These pings can include the consent state, timestamp, user agent, referrer, a random value for the page load and coarse information about whether an ad-click parameter was present. Canvilia enables ad-data redaction, and these pings do not use the Analytics cookies listed above.
Google Analytics user-level and event-level data is retained for up to 14 months. Aggregated reports may remain available for longer without the same user-level detail.
Canvilia does not currently deploy a Google Ads tag or set Canvilia advertising cookies. The consent banner includes a Marketing choice so advertising storage remains denied unless you choose it. We will update this policy and obtain consent where required before introducing advertising or retargeting cookies.
Map views and address suggestions use Google Maps Platform and Google Places. When one of these features loads, Google may receive technical information such as your IP address, browser details and the map or address request. Google may also use cookies or similar technologies under its own policies.
Read Google's Privacy Policy and how Google uses cookies for current details. Do not use a location feature if you do not want that request sent to Google.
When you choose card payment, Canvilia sends you to Yapı Kredi Posnet for 3-D Secure authentication. The bank may use cookies on its own domain to secure and complete that step. Those cookies are controlled by the bank and are covered by its notices. Canvilia does not receive or store your full card details.
We review this policy when our website, providers or consent categories change. If we introduce a new non-essential purpose or third party, we will update the notice and request fresh consent where required.
Questions about cookies or consent can be sent to: