Cookie preferences
Only the cookies the product needs: to keep you signed in, and to open your bookings.
This document describes how Du Lich Viet works today and is published for transparency while the product is pre-launch. It has not been through legal review and is not a binding agreement. The reviewed version arrives with the company details, before bookings and payments open.
Last updated 17 September 2026
What this site sets
`inbound_session` holds a random session token and nothing else — no name, no email, nothing readable. It is set when you sign in and removed when you sign out.
`inbound_guest` holds a random id when you book without signing in, so this browser can find that booking again. `inbound_bookings` holds the references of the bookings made in this browser and the email each was made with — the two things our backend asks for before it opens a booking. It is encrypted, so neither you nor anyone who copies it can read it.
All three are marked HttpOnly, so no script can read them, and SameSite=Lax, so they are not sent from other people's sites. In production they are only sent over HTTPS.
- inbound_session — essential, expires after seven days or at sign out
- inbound_guest — essential for booking without an account, expires after 30 days or when you sign in
- inbound_bookings — essential for opening your bookings, encrypted, expires after 180 days
Why there is no cookie banner
A banner exists to ask permission for cookies that are not essential: analytics, advertising, cross-site measurement. This site sets none of them, so there is nothing to ask you about, and a banner that asked anyway would be theatre.
If analytics is ever added, that changes: the categories will be listed here with controls, and consent will be asked for before anything non-essential is set.
Other browser storage
The site does not use localStorage or similar storage to profile you. Your saved experiences live with your account on the server, not in your browser, which is why they follow you between devices.
If you block it
Blocking these cookies is fine for browsing — search and every experience page work without them. You will not be able to stay signed in, and a booking you make will not open again from this browser, though it still exists and support can find it by its reference and your email.