1. Cookies and similar technologies
Cookies are small files stored by a website in a browser. Similar technologies include local storage, pixels and software identifiers. Spanish cookie rules can apply to storing or accessing information on a device even when that information is not personal data. This policy covers both cookies and the local-storage entries found in the audited application.
2. Responsible publisher
The responsible publisher is [NOMBRE O RAZÓN SOCIAL PENDIENTE]. Full identity and contact details remain a publication blocker; see the Legal Notice and Privacy Policy.
3. Technology inventory detected
| Name | Provider / domain | Purpose | Category | Duration | Type | Installed |
|---|---|---|---|---|---|---|
| the-business-doer:consent | The Business Doer / first party | Stores categories, policy version, decision time, expiry and decision method | Necessary | 12 months | localStorage | When the visitor makes a choice |
| sb-[project-ref]-auth-token | Lovable Cloud authentication / first party storage key | Keeps an authorised administrator signed in and refreshes the protected session | Necessary | Until sign-out, session expiry or browser-data removal | localStorage | Only after successful administrator authentication |
The application also emits typed in-page analytics events through the browser’sCustomEvent API. They are not transmitted, persisted or read by any provider. A future analytics adapter is blocked in code unless the analytics category has been accepted.
No Google Analytics, Google Tag Manager, AdSense, Google Ads, Meta Pixel, Hotjar, Microsoft Clarity, YouTube/Vimeo/Maps iframe or advertising identifier was found. The published article records inspected have no featured-image URL. Fonts are served locally, so the previous Google Fonts request has been removed.
4. Categories
- Necessary: consent records, authentication and required interface state. They are active only where needed and cannot be disabled in the panel.
- Preferences: optional experience choices. No service in this category is active.
- Analytics: audience or product measurement. No provider is active.
- Advertising and marketing: ad delivery, personalisation or campaign measurement. No provider is active.
5. Accept, reject, configure or withdraw
On a first visit, optional categories are off. Accept all, Reject all and Configure are presented together. Scrolling, navigating or closing a settings dialog does not signal consent. Your decision is saved for 12 months and can be replaced at any time.
Rejecting optional categories does not block the public publication. Disabling necessary browser storage manually can sign an administrator out, forget the sidebar state or cause the privacy banner to reappear.
6. Technical blocking and revocation
Optional services are not loaded before the corresponding choice. No such service is currently connected. The reusable consent gate displays a placeholder instead of future third-party embeds, and the analytics integration boundary checks consent before sending data to a future adapter. Changing a choice prevents future optional loads. Because no optional provider cookies exist today, there are no third-party cookies to delete on revocation.
7. Renewal and material changes
The consent record expires after 12 months. A change to the policy version, purpose, category or provider invalidates the old record and asks for a new decision. A preference recorded while no optional services are present does not authorise an undisclosed future provider; adding one requires an inventory update, policy-version change and renewed consent.
8. Third parties, transfers and Google advertising
Lovable Cloud processes necessary application and authentication requests. Its exact contractual entity, processing location, subprocessors and transfer safeguards remain to be verified: [REGIÓN, DPA Y SUBENCARGADOS DE LOVABLE CLOUD PENDIENTES DE VERIFICACIÓN]. Google authentication is contacted only when an administrator chooses “Continue with Google”; Google may then use its own necessary authentication technologies under its policies.
AdSense is not installed. If it is later used for visitors in the EEA, United Kingdom or Switzerland, this first-party panel must not be represented as sufficient for Google personalised advertising: Google currently requires publishers using AdSense, Ad Manager or AdMob to use a Google-certified CMP integrated with the IAB Europe TCF. Consent Mode would also need to be configured with denied defaults before Google tags load; Consent Mode does not replace valid consent.
9. Browser controls
Browsers allow you to inspect, block or delete cookies and site data through their privacy settings. The location varies by version; consult the official help for Chrome, Safari, Firefox, Edge or the browser you use. Browser-level deletion also removes this site’s consent record, so the banner will be displayed again.
10. Questions
Cookie and privacy questions should be sent to [CORREO DE PRIVACIDAD PENDIENTE]. That working address and the responsible publisher’s identity must be completed before production publication.