Cookies and browser storage

What we store without asking for consent

Technical storage needs no consent under Article 22.2 of the LSSI-CE, the Spanish information society act. It stores no visit identifier and is not used to follow you around the web.

• tc_lang (local storage): your chosen language; it never leaves your browser and stays until you clear site data.
• terrenocheck-es-cookie-consent-v1 (local storage): your banner answer, essential, analytics, ads or optional (both purposes). It never leaves your browser and stays until you change it or clear site data.
• tc_withdrawal_csrf (cookie): a random code to check that the withdrawal form is sent from this site. Set only when you open the form; it expires after one hour and is deleted when you send it.
• terrenocheck-es-purchase:… (session storage): only after optional consent and a payment, prevents sending the same purchase event twice when the page is reloaded in that tab. It disappears when the tab closes.

Visit counting on our server

The count writes or reads no identifier on your device. The server derives a non-reversible code from the truncated IP address, browser type and language. It changes daily at midnight UTC. We keep the shortened network, language, pages and actions, and visit source for 90 days, never your email or full IP address.

What loads only after you consent

• Statistics: Google Analytics, to see which pages are read.
• Advertising: Google Ads, to see which ad led to an order.

Google Ireland Limited receives visit data, including your IP address, for the purposes you choose. “Choose” lets you select each separately; “Allow optional cookies” allows both. A purpose that is not configured stays off. The legal basis is your consent: Article 22.2 LSSI-CE and Article 6(1)(a) GDPR.

Before your choice the Google script is not fetched and no connection opens to googletagmanager.com. Consent Mode v2 declares denied for analytics_storage, ad_storage, ad_user_data and ad_personalization; only the chosen purpose is granted. The service may write cookies: _ga and _ga_* for Analytics (up to two years), and _gcl_au for Ads (up to 90 days); duration depends on Google's configuration.

Google, transfers and rights

Google may process data in the United States under applicable safeguards, including the EU-US Data Privacy Framework and standard contractual clauses. You may ask the controller and Google for access or erasure and complain to the AEPD or the authority where you live. The privacy policy identifies the controller and explains your rights.

Refusing or changing your mind

“Essential only” lets you keep reading, search for a parcel and complete an order when available. “Cookie preferences” at the foot of every page reopens the banner. Your next answer replaces the previous one. Withdrawing a purpose tells an already loaded tag denied at once; withdraw both and the next page load no longer requests the script. Withdrawal does not affect the lawfulness of earlier processing.

The map and payment

When a map is shown, your browser downloads map tiles and aerial imagery from Mapbox (api.mapbox.com). Mapbox receives your IP address and the area you are viewing. Pages without a map do not contact Mapbox. Searches go through our server: Mapbox receives the text or coordinates, not your IP. Stripe Checkout uses its own necessary payment and fraud-prevention technology.

How to clear the data

Clear this site's data in your browser settings and the banner will appear again. Cookies a provider keeps on its own domains must be cleared separately. Questions go to support@kandyb-studio.eu.