Cookie policy
Last updated: 2026-04-22
This is an informational translation. The Spanish version at /es/legal/cookies prevails in case of any discrepancy.
1. Strictly necessary cookies (always on)
No consent required (LSSI-CE Art. 22.2 technical exception):
- Supabase Auth session cookies — session only.
- `prolio_country_v1` — language/country preference, 1 year.
- `prolio_consent_v1` (localStorage) — banner decision with policy version, timestamp and scope, 1 year.
2. Analytics cookies (only with your consent)
- Google Analytics 4 — Google LLC (USA), SCCs. Cookies `_ga`, `_ga_*`, up to 2 years. Opt-out: https://tools.google.com/dlpage/gaoptout
- PostHog Cloud US — PostHog Inc. (USA), us.i.posthog.com, SCCs. `ph_*` + localStorage entries, 1 year.
3. Marketing cookies
Prolio does not use advertising, remarketing, social or profiling cookies. The banner's Marketing toggle stays off by default.
4. Accept / reject / change
The first-visit banner offers Accept all, Reject all, and Customise with equal visual weight. Change your choice any time via the footer "Cookie preferences" link.
5. Consent evidence
Every decision is logged with policy version, timestamp and a non-reversible IP hash, retained for 24 months as AEPD evidence.
6. Changes
When the non-strictly-necessary cookie set changes we bump the policy version and the banner reappears.