Cookie policy
Last updated: 29 September 2026
In short
Technical cookies are always used, because without them you can't log in. Measurement and advertising cookies aren't set until you accept them, and you can change your mind whenever you want. Google's scripts do load when you arrive, but in "denied" mode: section 5 explains what that means.
1. What a cookie is
A small file a website saves in your browser. Some are essential for the site to work; others are used to measure how it's used or to show advertising.
2. Technical cookies
These are necessary to provide the service and are exempt from consent under article 22.2 of the Ley 34/2002. Without them you can't log in.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| better-auth.session_token | Keep the session logged in | Own | 30 days |
| better-auth.csrf_token | Prevent cross-site request forgery | Own | Session |
| eldeca_cookies | Remember which cookies you accepted, so we don't ask again | Own | 24 months |
The public part of the site — including verifying a document via its QR code — works with no cookies at all.
3. Measurement
They tell us which pages are visited and where people leave, so we know what to fix. Only set if you accept them.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _ga | Distinguish visitors | Google Analytics | 2 years |
| _ga_* | Maintain measurement session state | Google Analytics | 2 years |
| eldeca_origen | Remember where you first arrived from (search engine, ad, email…), to know which channel brings customers | Own | 6 months |
4. Advertising
They let us measure whether an ad worked and show you our advertising on other sites. Only set if you accept them.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _gcl_au | Measure ad effectiveness | Google Ads | 90 days |
| _fbp | Measure ad effectiveness and remarketing | Meta | 90 days |
5. What happens before you decide
To measure visits and ads only for those who accept, this site loads Google's scripts on arrival (Tag Manager, Analytics and Ads), configured in "denied" mode (Google Consent Mode v2). Until you accept, those scripts don't store cookies or identifiers on your device and, according to Google, don't allow identifying who visits the site.
What does happen, as with any external resource, is that your browser connects to Google's servers to download them, so Google receives technical data from that connection, such as your IP address. Also, if you arrive from a Google ad, that click's identifier may travel in the page address while you browse, without being stored on your device.
If you accept a category, the scripts switch to "granted" for it at that moment and can then set the cookies in the tables above. If you reject, they stay "denied". The Meta pixel is different: it doesn't load until you accept advertising.
6. How to accept, reject or change your mind
The first time you arrive, a notice appears with three equally weighted options: accept all, reject all, or choose by category. Rejecting is as easy as accepting, and rejecting doesn't limit use of the service.
Your choice is stored for 24 months. You can change it whenever you want from the "Cookie preferences" link at the bottom of every page, or from the button at the top of this page.
You can also block or delete cookies from your browser settings. Note that blocking technical cookies will prevent you from logging in.
7. Transfers and rights
Measurement and advertising cookies belong to Google and Meta, who may process data outside the European Economic Area with the safeguards in Chapter V of the GDPR. You can check their policies at policies.google.com and facebook.com/privacy.
For the processing of your data and how to exercise your rights, see the privacy policy.