Cookie policy.

A cookie is a small text file a website asks your browser to store, so it can recognise you on a return visit. "First-party" means the cookie is set by the site you are looking at (in this case openbaltics.com). "Third-party" means it is set by a different domain, typically an analytics or advertising service. Some of what we describe below is technically browser localStorage rather than a traditional cookie, but the same rules apply.

On your first visit we show a banner with two choices: Accept or Decline. Strictly necessary items are always active because the site cannot function without them and they are exempt from consent under the ePrivacy Directive (Art. 5(3)). Analytics cookies are off by default and only switch on if you choose Accept. If you Decline, no analytics cookies are set.

To change your choice later, clear this site's storage in your browser (see Browser controls below). The banner will appear again on your next visit so you can choose afresh.

NEXT_LOCALE

First-party cookie. Remembers your chosen language (English, German or Polish) so pages load in the right one. Contains only the language code. Expires after about a year.

ob-consent

First-party localStorage entry. Records whether you accepted or declined optional cookies, so we do not ask on every visit. Contains the value "granted" or "denied". Persists until you clear your browser storage.

If you Accept, we load Google Analytics 4 to understand how the site is used: which pages and languages are visited, where visitors come from, and how the site performs. We use Google Consent Mode, so before consent no analytics cookies are stored. This data helps us improve the site, not to identify you personally.

Provider

Google Ireland Ltd (Google Analytics 4).

Cookies

Typically _ga and _ga_<id>, used to distinguish visitors and sessions.

Purpose

Aggregate traffic and usage measurement.

Expires

Up to two years; you can clear them at any time.

Transfers

May involve processing by Google outside the EU under its standard contractual clauses.

• No A/B testing or session-replay tools (no Hotjar, no FullStory).
• No social-network embed cookies: we do not embed Instagram, X, YouTube or Facebook content directly, and our footer links are plain anchor tags.
• No advertising, retargeting or social-media pixels: we do not run the Meta (Facebook) Pixel, Google Ads, or any other ad-network tracker.

Our web server keeps standard request logs: IP address, user agent, page requested, timestamp, response code. Logs are retained for 14 days and used only to investigate errors and abuse. They are not joined to any cookie or to your booking file.

Every modern browser lets you view, block and delete site storage. The relevant settings are typically under Privacy or Site Settings. Clearing this site's storage also resets your consent choice, so the banner will reappear on your next visit.

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Settings → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

If we add or change a cookie, this page will list it and the last-updated date at the top will reflect the change. Where the law requires it, the banner will ask for fresh consent.