Cookies

Cloudflare may use cf_clearance when it needs to verify a connection against automated traffic. The zone’s configured passage time is 30 minutes; the provider may apply validation tolerances. The cookie was not observed in the ordinary check, so we do not claim it is installed on every visit. Bot Fight Mode and JavaScript Detections are disabled; __cf_bm was not observed. We will review the inventory if this configuration changes.

Private staff access uses sessionid to maintain the administration session. Server expiry is eight hours and the session cookie expires when the browser closes, although some browsers restore sessions. Administration is not available on the public website.

You can delete or block cookies in your browser. This release has no public compatibility selector or forms issuing csrftoken. Before adding technologies for other purposes, we will review the information and request consent where required.

If you accept measurement, we use Umami, hosted on our server, to count page views and clicks on links to Amazon. We use this to improve content and assess interest in references; the legal basis is your consent (GDPR Article 6.1.a). A click does not tell us what you bought or identify you as a buyer.

We send the page path without parameters, domain, language and referring domain. For an Amazon link we add our product identifier and link position (card, start or end of product page). We also count searches with and without results, without sending search text, selected filters or their values. The service receives connection data and may derive browser, operating system, device and approximate location. We do not send measurements, form contents, names, email addresses or a personal identifier selected by Cubifora. We do not use session recordings, heat maps or personalized advertising.

Umami is delivered from umami.alejandromaestre.com through our infrastructure and Cloudflare. It loads only after consent. You can refuse without losing functionality and withdraw through the visit-measurement control. We respect DNT and GPC. Withdrawal stops new measurement without affecting the lawfulness of earlier processing.

Your preference is stored in browser local storage for up to 180 days, without a personal identifier. A daily task deletes individual Umami events older than 90 days, with up to an additional day due to scheduling. Cubifora application backups do not include those individual events. We also retain aggregated reports by page and period, without visitor identifiers, to compare business results; these form part of the application database and backups. The retention limit is reapplied before bringing a server restoration containing individual events into service.