1. What cookies are
Cookies are small text files that a website sends to the visitor’s browser, where they are stored and sent back to the same website on later visits. Similar technologies exist alongside cookies, such as the browser’s local storage or requests made to third-party servers: where this site uses them, they are described in this document together with the cookies.
This document lists by name every cookie actually set by www.maltaaviationmuseum.com, with the duration read in the browser. The last check was carried out on 16 October 2026, by ignoring the banner, accepting, rejecting and withdrawing consent, with a browser not logged in to any third-party service.
The data controller is the Malta Aviation Museum Foundation, Ta’ Qali, ATD 4000, Malta, [email protected]. For everything that does not concern cookies, please see the Privacy Policy.
2. How to manage your consent
On your first visit a banner lets you choose between «Accept All», «Reject All» and «Customize», which lets you decide by category (Functional, Analytics, Marketing). Ignoring the banner means that no consent is given: in that case only the technical tools described in section 3 are used.
After your choice the banner is replaced by an icon at the bottom left of every page, from which you can change or withdraw your choice at any time. After withdrawal, the tools that require consent are no longer loaded; cookies already stored in the browser are no longer updated and can be deleted from the browser settings.
Rules applied: Article 5(3) of Directive 2002/58/EC (ePrivacy Directive), as implemented in Malta by the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01), and Regulation (EU) 2016/679 (GDPR).
3. Technical (necessary) cookies
They are set without consent, because they are strictly necessary for the site to work or for its security.
| Cookie | Origin | When | Purpose | Duration |
|---|---|---|---|---|
cookieadmin_consent | First party (www.maltaaviationmuseum.com) | After a choice on the banner | Stores the choice you made and an identifier of that choice | 365 days |
_GRECAPTCHA | Third party (www.google.com) | When an article is visited | Protects the comment form from spam (Google reCAPTCHA): tells real visitors apart from automated programs | 180 days |
comment_author_{hash}, comment_author_email_{hash}, comment_author_url_{hash} | First party (www.maltaaviationmuseum.com) | Only if, when commenting, you tick the box to save your name and email | Fill in the comment form for you next time | 347 days |
Together with the _GRECAPTCHA cookie, reCAPTCHA writes the entry _grecaptcha in the browser’s local storage, for the same purpose. On every page the site also writes the local storage entry elementor, used by the page builder to manage the display of its own elements: it stays in the browser and is not sent to anyone.
On pages without a comment form (home page, The Foundation, What Can I See, Restoration Projects, Membership & Volunteering, News, Contact Us, Privacy Policy and Cookie Policy) the site does not set any cookie until you make a choice on the banner.
The choice made on the banner is also recorded on the site’s server, together with the identifier stored in the cookieadmin_consent cookie, so that the consent received can be demonstrated. These records are kept for 365 days.
4. Analytics cookies
With consent to the «Analytics» category (also through «Accept All») the site uses Google Analytics 4, provided by Google Ireland Limited, to find out in aggregate form how many people visit the site and which pages they read. Without consent Google Analytics is not loaded and receives no data.
| Cookie | Origin | Purpose | Duration |
|---|---|---|---|
_ga | First party (.maltaaviationmuseum.com), read by Google | Distinguishes visitors with a random identifier | 400 days |
_ga_RJT4VNBCED | First party (.maltaaviationmuseum.com), read by Google | Keeps the state of the visit session | 400 days |
In the site’s Google Analytics property Google Signals is not active and there is no link to Google Ads: the data are not associated with visitors’ Google accounts nor used for advertising. Google keeps the data for 14 months.
5. Embedded content and marketing cookies
The site does not use its own advertising cookies, nor pixels or remarketing tools, and does not show ads. Some pages, however, contain YouTube videos and Google Maps (Google Ireland Limited): they stay blocked until you consent to the «Marketing» category (also through «Accept All»).
Once unblocked, a YouTube video sets the following cookies, which YouTube may also use for advertising and profiling purposes.
| Cookie | Origin | Purpose | Duration |
|---|---|---|---|
YSC | Third party (.youtube.com) | Identifies the video viewing session | Session |
VISITOR_INFO1_LIVE | Third party (.youtube.com) | Estimates the available bandwidth and personalises the content and ads offered | 180 days |
VISITOR_PRIVACY_METADATA | Third party (.youtube.com) | Stores the visitor’s privacy choices with YouTube | 180 days |
__Secure-ROLLOUT_TOKEN | Third party (.youtube.com) | Manages the gradual rollout of video player features | 180 days |
__Secure-YNID | Third party (.youtube.com) | Visitor identifier used by YouTube for security and personalisation | 180 days |
When a video is unblocked the browser also contacts Google’s doubleclick.net domains, without any further cookie being found during the check. Once unblocked, the Google Maps map on the home page and on the Contact Us page loads its components and fonts from Google’s servers, without setting cookies during the check.
6. Services that receive the IP address without setting cookies
The following services do not set cookies (checked when the pages load), but in order to work they receive the visitor’s IP address and the browser’s technical data.
| Service | Provider | Where | When |
|---|---|---|---|
| Google reCAPTCHA on the forms | Google Ireland Limited | Every page (newsletter form in the footer), Contact Us, Membership & Volunteering | When the page loads: the components and fonts of the service that protects the forms from spam are downloaded |
| YouTube video preview | Google Ireland Limited | Pages and articles containing a YouTube video | When the page loads: only the preview image is downloaded |
| Gravatar (profile pictures of commenters) | Automattic Inc. | Articles with published comments | When the page loads: the picture associated with each comment is downloaded |
| Cloudflare | Cloudflare, Inc. | Every page | Every request to the site passes through Cloudflare’s network, which protects it from attacks and speeds up its delivery |
The Facebook, X (Twitter) and YouTube icons in the site header are simple links to the Malta Aviation Museum’s profiles: they do not send any data until you click them. The site’s fonts are served by the site itself, not by Google Fonts.
7. Transfer of data outside the European Union
Google Ireland Limited may transfer data to its parent company Google LLC, in the United States; Cloudflare, Inc. and Automattic Inc. are based in the United States. All these companies participate in the EU-U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision of 10 July 2023.
8. How to disable cookies in the browser
Besides the icon described in section 2, cookies can be blocked or deleted in the browser settings: Chrome, Firefox, Safari, Edge. Blocking technical cookies may prevent the site from remembering the choice made on the banner.
9. Your rights and changes to this document
The rights granted by Articles 15-22 of Regulation (EU) 2016/679 and how to exercise them are described in the Privacy Policy. This document is updated whenever the tools used by the site change.
Last updated: 16 October 2026.