Cookie Policy

Cookies are small text files a website saves to your device so it can remember information between visits. "Similar technologies" includes things like local storage, session storage, and pixel tags — we treat them the same way as cookies in this policy.

Cookies can be session (deleted when you close your browser) or persistent (stored for a set time). They can be first-party (set by us) or third-party (set by another service we embed).

We follow a strict consent model. Necessary cookies are set automatically because the site cannot work without them. Analytics cookies are NOT set until you accept them through the cookie banner shown on your first visit (or through the "Cookie preferences" link in the footer).

We use Google Consent Mode v2. Google Analytics loads on every page, but until you accept analytics cookies it runs in a restricted mode: it stores no cookies and sends Google only aggregated, cookieless measurement signals, with your consent state flagged as “denied”. When you accept, it switches to full measurement and sets the analytics cookies listed below. We also honour the Global Privacy Control signal — if your browser sends GPC, we treat that as a rejection without showing the banner, and analytics stays in the cookieless, denied state.

Your choice is stored for 182 days (about six months). If we materially change this policy, we will ask you again.

Server logs are kept by our hosting provider for security and abuse detection. Server logs are not cookies; they are described in our Privacy Policy.

Necessary — set automatically:

• ts_consent — first-party. Stores your cookie preferences (which categories you accepted) so we do not ask again on every visit. JSON value, lifetime 182 days. Mirrored to localStorage as a fallback in browsers that aggressively block cookies.
• payload-token — first-party. Set only when an editor signs in to the CMS. Not set for visitors browsing the public site. Session-length.

The Inner Circle sign-up form is protected by a hidden honeypot field, a timing check, and server-side rate-limiting — none of which set a cookie.

Analytics — only set after you accept analytics cookies. Before you accept (or if you reject), Google Analytics sets no cookies and sends only aggregated, cookieless signals:

• _ga — first-party, set by Google Analytics 4. Distinguishes unique visitors. Lifetime 13 months. GA4 does not store full IP addresses.
• _ga_<container-id> — first-party, set by Google Analytics 4. Persists session state. Lifetime 13 months.

Marketing — none currently set. We do not run advertising on this site and have no advertising integrations. If that changes, we will update this list and ask for your consent again.

We embed videos hosted by Vimeo (Vimeo.com, Inc., United States) on some pages — primarily the homepage hero and the Press Room hero. Vimeo may set its own cookies (notably vuid, a visitor identifier with a roughly two-year lifetime) when its player loads. We do not pass owner-side tracking parameters to Vimeo, but we do not control what Vimeo itself sets. The looping background videos elsewhere on the site are served from our own storage and set no cookies. Vimeo's cookie use is governed by Vimeo's cookie policy.

We do not embed YouTube, Instagram, Facebook, TikTok, or other tracking-heavy third-party widgets. If we add such embeds in the future, we will use privacy-respecting embed modes where available (e.g. youtube-nocookie) and update this list.

If you click an outbound link to a third-party site (for example, a Therme Group venue site, a press outlet, or a social platform), that site will operate under its own cookie policy.

You can change your choice at any time from the "Cookie preferences" link in the footer. Opening that link re-shows the same panel you saw on first visit, with your current choices pre-filled. Saving overrides your previous decision immediately.

Withdrawing consent stops new analytics data from being collected. Data that has already been collected with your earlier consent is not retroactively deleted — you can request deletion of your analytics data by emailing privacy@thermesingapore.com. Because analytics data is keyed by an anonymous client ID rather than your identity, you may need to provide the ID we hold to make the request actionable.

You can clear and block cookies in your browser at any time. Most browsers let you see which cookies a site has set, delete cookies on demand, block all cookies or only third-party cookies, and request that sites do not track you.

Helpful guides:

• Cookies in Chrome
• Cookies in Safari
• Cookies in Firefox
• Cookies in Microsoft Edge

Blocking strictly-necessary cookies may break parts of the site — for example, the Inner Circle form will not submit. Most of the site, including reading content, will still work.

For broader guidance on data protection in Singapore, see the Personal Data Protection Commission (PDPC). For detailed guidance on cookies in the UK and EU, see the Information Commissioner's Office (ICO).

Independent consumer guides on cookies are available at aboutcookies.org.

Questions about cookies on this site: email privacy@thermesingapore.com. For broader privacy questions and your rights, see our Privacy Policy.

We will update this policy whenever we change how we use cookies. The "last updated" date at the top of the page reflects the most recent change.

If we add non-essential cookies, we will tell you before they are set — through the consent banner described above — not just by quietly updating this page.