Cookie Policy — Enter Spain

1. What This Policy Covers

This Cookie Policy explains what cookies and similar tracking technologies we use on https://enterspain.io, why we use them, and how you can control them at any time.

This policy must be read alongside our Privacy Policy and Legal Notice.

The legal basis for optional cookies is your consent, given through our cookie banner. Strictly necessary cookies do not require consent and cannot be disabled — they are required for the site to operate.

2. What Are Cookies and Similar Technologies?

Cookies are small text files placed on your device by a website you visit. They may be "session cookies" (deleted when you close your browser) or "persistent cookies" (stored on your device for a defined period).

localStorage and sessionStorage are browser storage mechanisms that function similarly to cookies but are stored differently. Where we use these, they are disclosed in the tables below and subject to the same consent requirements as comparable cookies.

We do not use advertising cookies, behavioural tracking cookies, fingerprinting, or any cross-site tracking technology.

3. Cookies and Technologies We Use

3.1 Strictly Necessary

These are essential for the website to function. They do not require your consent under Article 22(2) LSSI-CE. They cannot be disabled through our cookie settings.

Name / Key	Purpose	Storage	Duration
`session`	Keeps you authenticated during your browser session.	HTTP Cookie	Session
`csrf_token`	Protects forms against cross-site request forgery attacks.	HTTP Cookie	Session
`auth_token`	Maintains your login state if "remember me" is enabled.	localStorage	Up to 30 days
`cookie_consent` `cookie_consent_date` `cookie_consent_version` `cookie_consent_analytics` `cookie_consent_functional`	Records your cookie consent choice, the date it was made, the policy version at time of consent, and your category-level preferences. Required for accountability under GDPR Art. 5(2).	localStorage	12 months (re-prompted after expiry)
`_stripe_mid` `_stripe_sid`	Required by Stripe for payment fraud prevention and session integrity on checkout pages. Stripe acts as an independent data controller for these cookies — see stripe.com/privacy.	HTTP Cookie	1 year / 30 min

3.2 Functional Cookies — Consent Required

These enhance your experience by remembering your preferences. They do not track you across other websites. They are only set if you have accepted Functional cookies in the cookie banner or preferences panel.

Name / Key	Purpose	Storage	Duration
`lang`	Remembers your selected language preference (English, Spanish, Dutch).	localStorage	12 months
`theme`	Remembers your interface colour preference.	localStorage	12 months
`sidebar_state`	Remembers whether the dashboard sidebar is expanded or collapsed.	localStorage	Session

3.3 Analytics Cookies — Consent Required

If you accept Analytics cookies in our banner or preferences panel, we load Plausible Analytics — a privacy-oriented, EU-based analytics service. Plausible helps us understand aggregate usage patterns (such as which pages are most visited). It does not use personal identifiers, cross-site tracking cookies, or advertising networks. Full details at plausible.io/privacy.

If you choose Essential Only or decline Analytics in preferences, the Plausible script is not loaded and no analytics data is collected from your session.

Service	Purpose	Personal data?	Privacy policy
Plausible Analytics	Anonymous aggregate site analytics — page views, referrers, device type. No cross-site tracking, no personal identifiers.	No personal data — aggregate only	plausible.io/privacy

3.4 Marketing and Advertising Cookies

We do not currently use marketing, retargeting, or advertising cookies. If this changes, this policy will be updated, your consent will be sought before any such cookies are placed, and the banner will be reset.

4. Third-Party Services

Service	Purpose	Consent required?	Privacy policy
Stripe	Secure payment processing on checkout pages. Stripe is an independent data controller for card data.	No — essential for payment	stripe.com/privacy
Plausible Analytics	Anonymous aggregate analytics.	Yes — only after you accept Analytics	plausible.io/privacy

We do not use Google Analytics, Facebook Pixel, Hotjar, or any advertising or behavioural tracking service.

5. How We Obtain and Record Consent

When you first visit the platform, a cookie banner is displayed. The banner offers three equally prominent options: Reject All, Manage Preferences, and Accept All. No option is pre-selected. You must make an active choice — the banner is not dismissed by scrolling or clicking elsewhere.

Your consent choice is recorded locally in your browser (localStorage) and includes: the choice made (accepted categories), the date and time of consent, and the version of this Cookie Policy at the time of consent.

Optional scripts (Analytics, Functional) are not loaded until you have given consent for the relevant category. Strictly necessary scripts are loaded immediately.

Your consent expires after 12 months. On expiry, the banner is displayed again on your next visit. If this policy changes materially (new categories or new providers), consent is reset and re-sought regardless of age.

6. Managing Your Preferences

Cookie Settings — change your choice at any time

You can reopen the preferences panel at any time by clicking the button below. This allows you to change which optional cookie categories you have accepted or declined.

The "Cookie Settings" link in the footer of every page also reopens this panel.

Browser settings

You can also manage cookies directly in your browser. Note that blocking strictly necessary cookies will prevent parts of the platform from working correctly.

7. Retention of Consent Records

Session cookies: Deleted when you close your browser.
Persistent localStorage entries: Retained for the periods shown in the tables above, or until you clear your browser data or reset your preferences.
Consent record (cookie_consent_*): Stored for 12 months from the date of consent, after which you will be re-prompted. Clearing this record causes the banner to reappear on your next visit.

8. Changes to This Policy

We will update this Cookie Policy when we add, remove, or change the cookies or technologies we use. The version number and date of last update appear at the top of this document. Where changes are material — such as the addition of new cookie categories or new third-party providers — we will reset the consent banner so that you are re-prompted to make a new choice.

9. Contact

Email: privacy@enterspain.io

See also our Privacy Policy, Terms & Conditions, and Legal Notice.