Cookie Policy
Villario · a trading name of Cyridium Ltd · Last updated: 14 October 2026 · ICO registration: ZC135949
This policy explains how Villario uses cookies and similar technologies when you browse Listings, book a stay, or manage a Property on villario.co.uk (the “Service”).
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies — local storage, session storage — work in comparable ways and are also covered by this policy.
2. Our legal basis
We operate under the UK Privacy and Electronic Communications Regulations (PECR) and the UK Data Use and Access Act (DUAA):
Strictly necessary cookies do not require your consent — they're needed to make a Booking, sign in, and process payment.
First-party analytics cookies used only to improve the Service, not shared with third parties or used for advertising, are DUAA-exempt from consent, but we must tell you about them and offer a meaningful opt-out.
All other cookies require your consent before we set them.
3. Cookies and similar storage we use
The tables list every cookie and every kind of browser storage the Service uses. Cookies are sent to our servers with each request; local and session storage stay on your device unless the page sends them.
3.1 Strictly necessary
Name | Type | Purpose | Duration |
|---|---|---|---|
site_auth_token | Cookie (HttpOnly) | Keeps you signed in while you browse and book on the Villario site. Only set after you sign in. | 15 minutes, renewed while you are active |
site_refresh_token | Cookie (HttpOnly) | Renews your sign-in without asking for your password again. Only set after you sign in. | 7 days |
site_auth_present | Cookie | A flag (no personal data) that tells the page whether you are signed in, so it can show the right menu. | 15 minutes |
site_identity_proof | Cookie (HttpOnly) | Short-lived proof that you have just entered your password (and two-step code, if enabled), so that sign-in can finish. Only set while you sign in. | 10 minutes |
auth_token, refresh_token, auth_base_token, auth_present, auth_base_present | Cookie (HttpOnly, except the two *_present flags) | Host portal only: keep a Host signed in to the dashboard, renew the sign-in, and remember the account when switching between organisations. Only set after a Host signs in. | 15 minutes (auth_token, auth_present); 7 days (the others) |
cms_cookie_consent | Local storage | Records the cookie choices you make in the banner. | Until you clear your browser data |
gst-display-currency | Local storage | Remembers the currency you chose for displaying prices. | Until you clear your browser data |
pbm-checkout-intent and *-auth-redirect items | Session storage | Lets a payment you have started finish if the page reloads, and stops a sign-in redirect from repeating. | Until you close the tab |
Host portal settings (for example dom-theme, dom-locale, dom_* menu and branding items, pbm_avatar) | Local storage | Host portal only: remember your display, language, menu and organisation choices. | Until you clear your browser data |
cms-theme, pbm-theme | Local storage | Remembers your light or dark display preference, where the site offers it. | Until you clear your browser data |
Your language is part of the page address (for example /en), not stored in a cookie.
3.2 First-party analytics (exempt from consent, opt-out available)
Name | Type | Purpose | Duration |
|---|---|---|---|
cyw_vid | Local storage | A random identifier that lets us count returning visitors and measure search and conversion in aggregate. It does not contain your name or email. | Until you clear your browser data or opt out |
cyw_sid (and cyw_goals_v1, cyw_goals_ts) | Session storage | Groups the pages of one visit, and caches which goals to measure for a few minutes. | Until you close the tab |
This analytics is our own: it is not shared with third parties and is not used for advertising. When you opt out, we stop sending analytics events and delete these items. You can opt out at any time with the cookie preferences link in the site footer, or automatically with your browser's Do Not Track or Global Privacy Control setting, which we honour.
3.3 Payment and notification features (only when you use them)
Name | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid, __stripe_sid | Stripe | Fraud detection and secure payment processing. Only present on the Booking checkout page. | 1 year / 30 minutes |
cms-push-endpoint | Your browser | Only if you switch on browser notifications: identifies your browser so we can send them to you. | Until you switch notifications off or clear your browser data |
3.4 Maps (from other providers)
Maps on Villario are loaded from other organisations: the search map uses OpenFreeMap, and the location map on a confirmed booking uses OpenStreetMap. When a map loads, your browser contacts the provider directly, so the provider receives your IP address and browser details, and could set its own cookies or storage; neither is known to set cookies for these maps. We do not send them any account or booking information. Their own privacy policies explain what they do with that data. If we add another map provider that uses cookies (for example an embedded Google map), we will list it here first and ask for your consent where the law requires it.
4. Managing your preferences
You can manage cookies in the following ways:
Cookie banner: Shown on your first visit; change your choices at any time with “Cookie preferences” in the site footer. Strictly necessary storage is always on; analytics can be switched off.
Browser settings: Most browsers let you block or delete cookies and site storage. Blocking strictly necessary cookies will prevent you from signing in or completing a Booking.
Do Not Track and Global Privacy Control: We honour both for our first-party analytics: nothing is recorded and nothing is stored.
5. Changes to this policy
We'll update this policy when we introduce new cookies or our practices change. The date at the top reflects the last revision.
6. Contact
Cyridium Ltd, trading as Villario
19 Brambles Crescent, Blythe Valley, Solihull, B90 8DJ
Email: support@villario.co.uk
ICO registration: ZC135949