1. What are cookies
Cookies are small text files a website stores on your device when you visit it. They remember information (language, session, preferences) and help us understand how the site is used. We also treat equivalent technologies (localStorage, sessionStorage, web beacons) as "cookies" for the purpose of this policy.
2. Legal framework
This policy follows Article 22.2 of Spanish Law 34/2002 (LSSI-CE), the GDPR, and the Spanish DPA's Cookie Guide.
3. Cookies we use
3.1 Strictly necessary cookies (no consent required)
| Name | Purpose | Duration |
|---|---|---|
sb-access-token / sb-refresh-token | Keep your Supabase Auth session active | Session / 30 days |
tcm_consent | Remember your cookie choice | 12 months |
__stripe_mid / __stripe_sid | Stripe anti-fraud during checkout | 1 year / session |
NEXT_LOCALE | Remember your language | 1 year |
3.2 Analytics cookies (only with your consent)
We use Google Analytics 4 (GA4) to understand, in aggregate, how the site is used. These cookies only load after you accept analytics in the consent banner — before that, Google's script is not even downloaded. We additionally apply Google Consent Mode v2 as a further safeguard.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Distinguish users (aggregate metric) | 2 years | |
| _ga_W010JHHT2M | Persist GA4 session state | 2 years | |
| _clck / _clsk | Microsoft Clarity | Aggregate click heatmaps & session recordings | 1 year / session |
Providers: Google Ireland Ltd. and Microsoft Ireland. Data may be transferred to the USA (Google LLC / Microsoft Corp.) under the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses. We do not use these cookies for advertising. Microsoft Clarity records interactions (clicks, scrolling) in aggregate and masks typed text. You can withdraw consent at any time from the cookie banner; when you do, they stop using storage.
3.3 Marketing cookies
We do not use marketing or advertising cookies of any third party.
4. Managing your preferences
- Through the consent banner that appears on first visit.
- Through your "My account → Privacy" panel once you are signed in.
- Through your browser (consult its documentation to delete or block cookies). Blocking all cookies, including strictly necessary ones, may prevent access to the service.
5. Withdrawing consent
You may withdraw consent at any time from the same panel where you granted it, or by deleting the tcm_consent cookie in your browser. After withdrawal the banner will reappear on your next visit.
6. International transfers
Some providers whose cookies are placed (Stripe and, if you accept analytics, Google and Microsoft) may transfer data outside the EEA under Standard Contractual Clauses. See the Privacy Policy for details.
7. Changes to this policy
Any changes will be published on this page, with an updated "Last updated" date at the top.