1. What are cookies?
Cookies are small text files that a website stores on your device when you visit it. The browser's local storage (localStorage) serves a similar purpose and is subject to the same rules.
They are used, for example, to keep a session open, remember your preferences or measure how the website is used.
Article 22.2 of the Spanish LSSI-CE and the GDPR require your consent before storing on your device any cookie that is not strictly necessary or that you have not requested yourself. Until you give it, none of those cookies are set.
Rejecting is as easy as accepting: the notice has a “Reject optional ones” button at the same level as the accept button. Closing the notice without choosing does not count as accepting —nothing is enabled and you will be asked again—, and your choice is kept for 24 months, after which you will be asked again.
2. Types of cookies we use
We classify the cookies on this website into four categories:
3. List of cookies used
This is everything the website may store on your device. Your choice in the preferences panel and your theme are kept in the browser's local storage, which is not sent to the server with every request:
| Name | Type | Duration | Purpose |
|---|---|---|---|
na:cookie-consent | Essential (localStorage) | 24 months | Stores which cookies you have accepted and when, so we do not ask you again on every visit. |
NEXT_LOCALE | Personalisation | Session | Remembers the language you have chosen while you browse. |
theme | Personalisation (localStorage) | Until you delete it | Remembers whether you prefer the light theme, the dark theme or your system's theme. |
__Secure-next-auth.session-token | Essential | Up to 30 days or until you sign out | Keeps you signed in to the portal. It is only created if you sign in. |
__Host-next-auth.csrf-token | Essential (security) | Session | Protects sign-in against forged requests from other websites. |
__Secure-next-auth.callback-url | Essential | Session | Remembers which page to return to after signing in. |
Cloudflare Turnstile | Essential (security) | While the check lasts | Verifies that whoever submits a form is a person. Cloudflare may store technical information on your device during that check. |
_ga | Analytics | 2 years | Identifier Google Analytics uses to distinguish visitors. It is only set if measurement is enabled and you accept analytics cookies. |
_ga_<container> | Analytics | 2 years | Keeps the Google Analytics session state. The suffix is the identifier of our measurement property. |
_gcl_au | Advertising | 90 days | Used by Google to tell whether you arrived from one of our ads and credit the visit to it. Only placed if you accept advertising. |
4. Third-party cookies and services
These are the third parties involved, what they receive and how they are used. Each has its own privacy policy:
- Google (Google Analytics via Google Tag Manager): only if we have enabled measurement and you accept analytics or advertising cookies. The container starts with all consent signals denied, so until you accept it does not write cookies or send identifiers. The advertising signals are only granted if you accept advertising cookies; in that case Google may use the data from your visit to measure our campaigns and to show you personalised ads.
- Vercel (Web Analytics): measures visits in aggregate without setting cookies or storing identifiers on your device, so it does not depend on your consent.
- Cloudflare (Turnstile): protects public forms when enabled. It receives your IP address and technical browser data, and may store information on your device while the check lasts. It is essential for the form to work, so it falls under the exemption for strictly necessary cookies.
- Esri (maps): pages with a map request the images from its servers, which receive your IP address when serving them. It does not set cookies.
There are no other third parties. In particular, we do not use social media pixels.
5. How to manage cookies
Preferences panel
You can change your choice, or withdraw it entirely, at any time from the panel, without giving reasons and with the same effort it took to give it:
Withdrawing consent does not affect the lawfulness of what was measured while it was given. From that moment, analytics or advertising cookies are no longer set; those already on your device can be deleted from your browser settings, as explained below.
Browser settings
You can also block or delete cookies from your browser settings. If you block essential cookies, the portal will not be able to keep your session:
6. Contact
If you have any questions about this cookie policy, you can write to us:
Salud En Ruta SL
Email: info@saludenruta.es
