Cookie Policy

This policy explains how grandbrilliant.al uses cookies and similar technologies, and what choices you have. It sits alongside our Privacy Policy.

1. What cookies are

A cookie is a small text file that a website asks your browser to store on your device. Cookies let a site remember things between pages and visits — for example that you have already dismissed a message, or which language you chose. Similar technologies such as local storage work the same way and are covered by this policy.

2. Our approach

Some cookies are needed for the site to work, and we set those without asking. We also use Google Analytics, added through Google’s Site Kit plugin, to see how visitors use the site and which pages and adverts lead to enquiries. For Google Analytics we ask for your consent in the cookie banner.

Google’s Site Kit plugin contains a fixed list of countries — the EU and the European Economic Area, the United Kingdom and Switzerland — where it starts Google’s tag with consent denied (the list in Site Kit’s code). In that mode, according to Google’s description of consent mode, Google Analytics stores no cookies until you click Accept and sends Google only basic signals without cookies, for example that a page was viewed. For visitors elsewhere, including Albania, Google Analytics starts as soon as a page opens and stores its cookies before you choose; clicking Deny turns it off on that page, but it starts again on the next page you open.

We do not sell browsing data, and we do not use Meta Pixel or any other advertising network’s tracker.

3. The cookies we use

Strictly necessary. These are required for the website to function and cannot be switched off in our systems. Under Albanian and EU rules they do not require your consent.

• WordPress session and security cookies — set only when someone signs in to administer the site. Ordinary visitors do not receive them.
• wordpress_test_cookie — a short-lived cookie WordPress uses on its sign-in page to check whether a browser accepts cookies. Ordinary visitors do not receive it, and it contains no personal data.
• pll_language — remembers the language you chose (Albanian, English or Polish). It is deleted when you close your browser and contains no personal data.
• cmplz_banner-status, cmplz_policy_id, cmplz_functional, cmplz_preferences, cmplz_statistics, cmplz_marketing, cmplz_consented_services — set by our consent tool, Complianz, when you answer the cookie banner, to remember your choice so that we do not ask again on every page. They are kept for 365 days and contain no personal data.
• wp_consent_functional, wp_consent_preferences, wp_consent_statistics, wp_consent_statistics-anonymous, wp_consent_marketing — copies of the same choice in a standard format that other plugins on the site read, such as Google’s Site Kit. They are kept for 30 days.

Functional. These support features you use on the page.

• gb_chat_teaser_seen (session storage) — once you open the chat or close its invitation, this remembers it, so the invitation does not appear again during your visit. It is deleted when you close the tab.
• The chat window — nothing is loaded from our sales system until you open the chat. When you do, the chat window comes from our sales system at crm.grandbrilliant.al and stores your language (i18nextLng, local storage) and, for the length of your visit, the page you came from and any campaign tags in the link (gb_tracking_v1, session storage), so the conversation can be linked to where it started. Cloudflare, the network provider in front of our sales system, sets a security cookie (__cf_bm, 30 minutes) to filter out automated traffic.

Statistics and advertising. These come from Google Analytics.

• _ga and _ga_5M96YWEZS0 — set by Google Analytics on our domain. _ga holds a random number that lets Google Analytics tell one browser from another; _ga_5M96YWEZS0 keeps track of your current visit. They are kept for up to 400 days.
• What is measured — the pages you view, roughly where you are, the device and browser you use, and a few actions: sending one of our forms (only the form’s name is recorded, never what you typed), subscribing to the newsletter, and tapping our phone number, WhatsApp link or e-mail address.
• Google Ads — we use those actions to measure which of our Google adverts lead to enquiries. Google may also use your visit to add your browser to advertising audiences, so that our adverts can be shown to you on other websites and apps (remarketing). To do this, Google combines the Google Analytics cookies above with its own advertising cookies on Google’s domains.

Google explains how it uses this information in How Google uses information from sites that use its services. You can limit personalised Google adverts in My Ad Center, and block Google Analytics on every website with Google’s opt-out browser add-on.

4. Content we host ourselves

Our fonts and imagery are served from our own domain, which means fewer third parties see your visit. There are two exceptions:

• Apartment photos — on the availability pages and the pages for individual apartments, some photos are loaded from the file storage of our sales system (Supabase). Cloudflare, which sits in front of that storage, may set its security cookie __cf_bm (30 minutes) on its own domain.
• The chat window — once you open it, it loads its typeface from Google Fonts, so Google receives your IP address, and it sends technical usage events to Lovable, the platform our sales system is built on.

We do not embed maps or videos from other sites: the maps on our pages are images, and links such as “Open in Google Maps” or WhatsApp take you to those services only when you click them.

5. Managing cookies

The first time you visit, a banner at the bottom of the screen asks for your choice: Accept, Deny, or View preferences to decide category by category. Refusing changes nothing about what you can read or do on the site.

You can change your mind at any time: once you have answered, a Manage consent tab stays at the bottom of the screen on every page and reopens the same choices. Withdrawing consent does not affect what happened before you withdrew it, and it does not delete cookies already stored; you can delete those in your browser.

You can also control and delete cookies through your browser settings. Every major browser lets you block cookies, delete existing ones, or be warned before one is stored:

• Chrome, Edge, Firefox and Safari all expose this under privacy or security settings.
• You can also browse in a private or incognito window, which discards cookies when you close it.

If you block the strictly necessary cookies, the site will still be readable, but the cookie banner will ask again on every page and parts of the site may behave less predictably.

6. Changes to this policy

We will update this page whenever our use of cookies changes. The date at the top tells you when it last changed.

7. Contact us

If you have questions about cookies or your privacy, write to info@grandbrilliant.al or to Grand Brilliant, Rruga e fshatrave turistik, Qerret, Kavajë, Albania.