Privacy
What this site collects, where it goes, and how long it stays. Short, because the site collects little.
This site sets no cookies and carries no advertising trackers. The fonts are served from this domain rather than from Google. There is no cookie banner to dismiss — consent is asked for cookies, and there are none to ask about.
Nothing is written to your browser's storage either: no local storage, no session storage.
One thing does count visits, and it is named below rather than buried: Cloudflare Web Analytics, running since 31 August 2026.
Who is responsible
Luca, Boat operator, Lake Como, is the data controller. Write to luca@comodays.com about anything on this page, including any of the rights listed below.
What happens when you send a request
The request form is the only place this site itself collects anything about you. When you send one, these fields travel with it: your name, your email address, the date you are asking about, where you are staying, how many people if you said, your notes if you wrote any, and a phone or WhatsApp number if you gave one. So do the tour and the kind of day, when the page or the link you came from carries them, and a hidden anti-spam field: if that one is filled, the request is discarded and nothing is kept. Three more are added at that moment: the page the form was on, the page you came from, and the country your request was sent from. Nothing else.
If you reach the form from a link that carries a choice in its address (the tour, the kind of day, a dock), the page reads it to fill in the form and keeps nothing in your browser.
The WhatsApp button is a link, not a form. Pressing it opens WhatsApp on our business account, and nothing reaches us until you write and send something there. From that point the conversation is between you and us inside WhatsApp, which is run by Meta and has its own terms — this site is no longer involved and cannot see it. If you would rather not use it, the form and the email address do the same job.
That information is written to a private Google spreadsheet and is used for one thing, which is answering you. It is not sold, not used for advertising, and not sent to any operator you have not asked to be put in touch with. If the request cannot be recorded, the site tells you so on the spot and gives you the email address instead of pretending it arrived.
Requests are kept for 24 months and then deleted, so that a returning guest is not asked the same questions twice. Ask sooner and they go sooner.
Counting visits
We use Cloudflare Web Analytics to know whether anyone is reading this. It records the page, where the visit came from, the country, the browser, and how fast the page loaded. It sets no cookie, stores nothing in your browser, and does not follow you to any other site or recognise you when you come back. The numbers arrive already added up: we can see that a page was read forty times, never that you read it.
It runs as a small script that Cloudflare adds as the page leaves their network. If your browser blocks it, everything on this site works exactly the same.
Who else sees anything
Cloudflare serves this site and processes each request as it passes through, which includes your IP address. Google stores the request spreadsheet. Both act on instructions and neither uses the data for its own purposes.
Meta sees a WhatsApp conversation if you start one, on its own terms rather than ours. We do not send it anything about you: the button opens a chat, and what happens next is what you write there.
Some links here go to booking platforms that pay a commission, and those links are marked as such next to the link itself. Following one takes you to that company, where their own privacy terms apply and not these.
Your rights
Under the GDPR you can ask what is held about you, correct it, have it deleted, get a copy of it, or object to it being held at all. One email is enough and there is no form to fill in. The legal basis for holding a request is that you asked for a reply to it. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali.
Last updated .