Cookies and external services
Complete translation of the Spanish original. Last updated: 30 October 2026.
1. Review findings
The website’s own code does not write cookies or use sessionStorage, IndexedDB or service workers. It uses exactly one first-party localStorage record: alonpo.privacy.brevo.v1. Its purpose is to remember the choice to allow or block the Brevo form, not to measure visits or identify a person. It contains only the version, choice and saved and expiry timestamps. The code stops accepting the record after 180 days and removes it at the next check. The browser may physically retain it until that check or until you clear it manually. No Google Analytics, Meta Pixel or other advertising or analytics services are included. Language changes are reflected in the URL. The previous review observed no JavaScript-readable cookies before Brevo was loaded; this version adds only the preference record described here. This is not a complete inspection of Set-Cookie headers or HttpOnly cookies, nor does it establish how Cloudflare will behave in production.
2. Optional services
The existing Brevo form is initially blocked. It loads only after your specific authorisation, establishing a connection to sibforms.com and allowing the form’s resources, including its sibforms.com script, to run. The inventory of cookies and storage on the provider’s domain could not be completed, so no unverified names, purposes or lifetimes are listed. The actual configuration must be checked before publication. Social media links are not widgets and do not load the platforms until you open them.
3. Accepting, declining and changing your choice
No general banner appears on arrival because the website’s own code does not activate optional services at that point. When you first request the form, equally presented options let you allow it or keep it blocked. Both choices are saved on this device for 180 days. The first-party record is technically necessary to remember your requested privacy setting; it is not used for tracking and creates no advertising ID. You can change or withdraw your choice under “Privacy settings” in the footer. With valid permission, the next click to open the form loads it without another prompt; it does not load automatically on a page visit. You are asked again after expiry, a version change or clearing browser data. If localStorage is unavailable, your choice lasts only for the visit and a notice explains this. Withdrawal saves the choice to block and immediately removes the iframe. Other tabs on the same origin apply withdrawal when they receive the storage event. Requests already sent cannot be reversed. Data or cookies on Brevo’s platform are managed through your browser and the provider. Blocking the form does not cancel an existing subscription; use the unsubscribe link in the newsletter or [email protected].
4. Cloudflare and review limitations
Cloudflare Pages is the intended hosting service. Security cookies depend on the features actually enabled; no Cloudflare cookie is declared present without being observed. Before publication, responses from the final domain, security settings, analytics features and any automatically injected scripts must be reviewed. If non-essential technologies are enabled, this information and the consent controls must be updated before they load.
5. Further information
The controller is Monika Sieberichs. Contact: [email protected]. The Privacy Policy explains purposes, legal bases, providers and your rights. This information takes account of the LSSI-CE, particularly Article 22.2, the GDPR and the AEPD cookie guidance. No private Brevo or Cloudflare settings are assumed.