Last updated: September 2026
A cookie is a small file your browser stores on your device. In the EU, cookies and similar storage (like localStorage) are governed by the ePrivacy Directive (2002/58/EC), transposed in Spain by LSSI-CE art. 22.2 and the AEPD Cookie Guide (2023, updated 2024), plus the GDPR when personal data is processed. Only cookies strictly necessary to provide the service you requested are exempt from consent; everything else needs your prior, informed, revocable consent.
The ePrivacy Regulation intended to replace the directive was still in draft in September 2026 with no final text. Until then we apply current law and AEPD guidance: transparent information, granular consent if non-essential cookies are ever added, and no dark patterns.
Faladoiro only uses exempt cookies and storage. No advertising, cross-site tracking, fingerprinting or cookie-based analytics. This table is the complete reference:
| Name | Owner | Purpose | Duration | Type |
|---|---|---|---|---|
| refresh_token | Faladoiro (first-party) | Keep you signed in. Essential for the service; without it you would need to sign in on every request. | 30 days · httpOnly · Secure · SameSite=Lax | Strictly necessary — consent-exempt |
| NEXT_LOCALE | Faladoiro (first-party) | Remember your UI and learning language to show the right content. | 1 year · SameSite=Lax | Preference — exempt (requested by you) |
| LOCALE_DETECTED | Faladoiro (first-party) | Avoid re-detecting the browser language on every visit. Only records that detection already ran. | 1 year · SameSite=Lax | Technical — exempt |
No analytics cookie. Umami, if enabled, runs without cookies and without personal data, self-hosted by us.
Beyond cookies, browsers can store data in localStorage. The AEPD treats it like cookies for information and consent when it is not strictly necessary. Faladoiro uses:
All are functional and requested by using the app. No advertising or profiling storage.
Art. 22.2 LSSI-CE + AEPD guidance: technical and strictly necessary preference cookies to provide the service you requested (stay signed in, remember language/theme/voice) do not need prior consent. They are disclosed here for transparency.
If we ever add cookie-based analytics, advertising pixels or any non-essential processing, we will put it behind a prior consent banner with accept / reject on equal effort and without blocking the essential service.
You can delete or block cookies in your browser and clear site storage. Note:
We will update this page if we add or change cookies or storage. If non-essential cookies are ever needed, a consent banner will be added before they are enabled and the date above will be updated.
For cookie or privacy questions: [email protected]. You can also exercise GDPR rights from Settings → Export data / Delete account. Supervisory authority: AEPD (aepd.es).