Cookie Policy
Last updated: 15 September 2026
1. What this page covers
This page lists every cookie and every piece of browser storage ADVX uses, what each one is for, and how long it lasts. Cookies are small files a website asks your browser to keep. Local storage and session storage do the same job in a different way — they stay on your device and are not sent to us with every request. We treat all three the same way here, because the question that matters to you is not the technology, it is what is being remembered about you. This page sits alongside our Privacy Policy, which explains what we do with personal data generally.
2. The short version
We use two kinds. The first kind is needed for the site to work at all — keeping you signed in, remembering what is in your cart, and blocking bots on our forms. These run whether or not you accept anything, because without them the site cannot do what you came for. The second kind is analytics. It tells us which pages people look at and where they give up. Analytics only runs if you press Accept. If you press Decline, or ignore the banner, no analytics cookie is ever set and no analytics data leaves your browser.
3. Strictly necessary — always on
These cannot be switched off in the site, because the site does not function without them. None of them are used for advertising and none are shared with advertisers. SIGN-IN (cookie, set by Supabase, our database and accounts provider). Name starts with sb- and ends with -auth-token. Keeps you signed in between pages and visits. Lasts until you sign out or the session expires. BOT PROTECTION (cookie, set by Cloudflare Turnstile). Names start with cf_ or __cf. Set only when you use a form — contact, newsletter, partner enquiry, corporate enquiry, sign-up, sign-in, password reset, or checkout. It tells Cloudflare whether the form is being filled in by a person. Typically lasts 30 minutes. We added this after real spam hit the site in August 2026. COOKIE CHOICE (local storage, advx_cookie_consent). Remembers whether you accepted or declined analytics, and when. Kept until you clear it or change your choice. Without it we would have to ask you on every page. CART (local storage, advx_cart_guest and advx_checkout_selection). What you have added and which items you are checking out. Kept until you clear your browser or complete the booking. CURRENCY (local storage, advx_currency, and advx_language which records the site language). Remembers whether you want prices in USD or VND. Kept until you change it. BOOKING CONFIRMATION (session storage, names starting advx_booking_). Carries your reference and totals from checkout to the confirmation page so we do not have to put them in the address bar. Deleted when you close the tab.
4. Helpful, but not essential — also on
These remember small preferences. They stay on your device, they are not analytics, and they are never sent anywhere. WISHLIST (local storage, advx_wishlist_guest) — saved experiences before you have an account. Moved into your account if you create one. RECENTLY VIEWED (local storage, advx_recently_viewed) — the experiences shown in the "recently viewed" strip. PREFERRED DATE (local storage, advx-preferred-date) — carries a date you picked from one page to the next so you do not retype it. MAP STYLE (session storage, advx-map-tiles) — which map provider loaded successfully for you. Deleted when you close the tab. If you would rather not keep these, clearing your browser's site data for advx.asia removes them all. Nothing breaks; the site simply forgets your preferences.
5. Analytics — only if you accept
We use PostHog to count visits and see which pages work. It is set only after you press Accept on the cookie banner. POSTHOG (cookie and local storage, names starting ph_). Gives your browser a random identifier so a repeat visit is not counted as a new person, and records which pages were opened and which buttons were pressed. The cookie lasts up to 12 months. We do not use it to target advertising, we do not sell what it collects, and we do not enable session recording or heatmaps. If you press Decline, PostHog is never loaded. If you accept and later change your mind, use the Cookie settings link at the bottom of any page — we stop collecting immediately and the identifier is dropped.
6. Third parties that can set cookies
STRIPE — our payment processor. Loads only on the checkout page and sets cookies to detect card fraud. Stripe is the only party that ever sees your full card details; we never receive or store them. CLOUDFLARE — the bot check on our forms, described in section 3. SUPABASE — accounts and data storage, described in section 3. POSTHOG — analytics, only after you accept, described in section 5. OPENSTREETMAP — the map on an experience page loads its picture tiles from OpenStreetMap or a similar tile service. Loading a map means your IP address reaches that provider, the same as loading any image from another site. No cookie is set by us for it. We do not run advertising networks, social media pixels, or retargeting of any kind. There is no Facebook pixel, no Google Ads tag and no TikTok pixel on this site.
7. Changing your mind
Use the Cookie settings link at the bottom of every page. It reopens the banner and you can switch analytics on or off as often as you like. The choice takes effect straight away. You can also block or delete cookies in your browser's own settings. If you block the strictly necessary ones you will not be able to sign in or complete a booking. We keep a record of the choice you made and the date you made it, stored in your own browser. That record exists so we can show that analytics ran only with permission.
8. Questions
Email info@advx.asia and ask. If you want to know exactly what we hold about you, the Privacy Policy explains how to request it.
Want to change your analytics choice? Use the Cookie settings link at the bottom of any page — it reopens the banner and takes effect straight away. Everything else is covered in our Privacy Policy.