Cookie policy
Last updated: September 2026.
Do we use cookies?
Yes, and only if you accept them: the Meta (Facebook and Instagram), which tells us whether our ads bring in customers, and Google Analytics, which tells us which pages get read and where the form gets stuck, and Google Ads, which tells us whether a Google ad brought us the request. There is no embedded social media content and no other tracker.
Until you press Accept in the notice, the pixel does not load and Analytics writes no cookie: nothing is stored on your device and nothing is sent to Meta. This is what article 22.2 of the Spanish LSSI-CE requires, which calls for prior consent for anything that is not strictly necessary. Declining takes exactly as much effort as accepting: both options are in the notice itself, one click away and with no intermediate layers (“Rather not” declines).
What the Meta pixel installs if you accept it
Cookies _fbp and, if you arrive from an ad, _fbc, lasting three months. They let us recognise that the same person who saw the ad later asked for a quote, so we can measure which campaigns work. The joint controller for that processing is Meta Platforms Ireland Ltd.; you can read their policy at facebook.com/privacy/policy.
What Google Analytics does before and after you accept
Analytics always loads, but it starts in denied mode: in that mode writes no cookie, it stores no identifier on your device and cannot recognise you, either on this visit or the next. It only sends loose, unidentified signals (that a page was viewed, how long it took to load) which Google aggregates to estimate totals. Because nothing is stored on your device, that mode falls outside article 22.2 of the Spanish LSSI-CE.
If you accept, it switches to full measurement and sets the cookies _ga and _ga_<id>, lasting two years, which make it possible to tell that two visits come from the same person. The IP address is truncated before being stored. The controller is Google Ireland Ltd.; its policy is at policies.google.com/privacy.
What Google Ads does if you accept
If you accept, the tag from Google Ads recognises that the person who requested a quote had arrived from one of our Google ads, so that we know which ads bring in customers. When the form is submitted, your email address and phone number are passed to it encrypted (Google does not see them in the clear and only uses them to match the visit to the click). It may set the cookies _gcl_au and _gcl_aw, lasting three months. The controller is Google Ireland Ltd.; its policy is at policies.google.com/privacy. Without your yes, it does not load.
Changing your mind
You can withdraw or give your consent at any time: Pressing it forgets your choice and brings the notice back. You can also clear the site data from your browser, with the same effect.
Protecting the form
The contact form uses Cloudflare Turnstile to tell a person from an automated script and prevent bulk fake submissions. To do so it loads a script from challenges.cloudflare.com which analyses technical signals from the browser during the check. It uses no advertising cookies, does not track you across sites and does not build a profile of you: Cloudflare designed it precisely as an alternative to the captchas that do. It is a security measure necessary to provide the service and is therefore covered by the exemption in article 22.2 of Spain's LSSI-CE, so it needs no prior consent. It loads only on the contact page, not across the site.
The technical storage we do use
We store a single item in your browser's local storage, not in a cookie: solv-tema, which remembers whether you prefer to view the site in light or dark mode. It is a preference you ask for yourself by pressing the button, it never leaves your device and it cannot be used to identify you. Under the AEPD's guidance, personalisation storage requested by the user is exempt from the requirement for prior consent. You can remove it by clearing the site data in your browser.
Hosting
The site is hosted on Cloudflare, which processes technical connection data (IP address, browser, date and time) in order to serve the page and protect it against attacks, on the legitimate-interest basis of network security. This data is not used for profiling or for advertising.
If this changes
If we add measurement or advertising in the future, we will ask for your prior consent through a settings panel before installing any non-essential cookie, and this policy will be updated to set out each cookie, its purpose and how long it lasts.