Cookie Policy
Last updated: 17 August 2026
1. What are cookies?
Cookies, or similar technologies such as your browser's local storage, are small pieces of data that a website saves on your device to remember information between visits — for example, the choice you make about this very notice.
2. What always loads on this site
By default, cumbresdelores.com only uses essential first-party technical storage to remember your cookie preference. No analytics tools, tracking pixels or advertising are loaded without your consent.
One technical exception worth knowing about: on the Rates and Contact pages, the date picker is a library (Flatpickr) served from the jsDelivr content delivery network. It sets no cookies and stores nothing on your device, but in order to serve the file it receives your IP address and browser details, as happens with any resource loaded from another domain. It is the only third-party resource loaded without asking you first, because the calendar will not work without it.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| cdl_cookie_consent | Local storage (localStorage), not a cookie | cumbresdelores.com (first-party) | Remember your choice in the cookie notice. Not used for analytics; contains no name, email, phone or form data | Up to 24 months; it then expires and you are asked again |
This preference is essential so that the notice is not shown on every visit and is exempt from consent under Article 22.2 of the Spanish LSSI-CE. It is not analytics and contains no name, email, phone or form content. In addition to expiring after 24 months, it is automatically invalidated whenever the policy or the technology changes substantially — for example, when analytics is switched on — so that you are asked to decide again.
3. Analytics (Google Analytics 4)
With your consent, we measure statistically how the website is used, to learn which content and features are useful and to improve the service. This category:
- requires your consent and is off by default;
- is not used for advertising: we do not use Google Ads, remarketing, ad personalisation or the creation of advertising audiences;
- is independent from the Google map: you may allow analytics while rejecting the map, and allow the map while rejecting analytics.
Measurement is provided by Google Analytics 4 (Google), loaded through Google Tag Manager purely as the technical mechanism that manages this loading after your consent; Google Tag Manager does not itself perform any tracking. Google Analytics 4 processes usage information such as pages viewed and scrolling, page language and page type, and technical browser and device information, linked to online/pseudonymous identifiers. This is not absolute anonymity, but we do not use it to identify you by name or for advertising.
Our setup is Consent Mode v2 in basic mode. This means that, until you allow analytics: Google Tag Manager is not loaded, Google Analytics 4 is not loaded, no analytics cookie is created and no measurement data is sent to Google — not even so-called "cookieless pings". Only after you allow analytics can Google Tag Manager and Google Analytics 4 load. The advertising states (ad storage and ad personalisation) remain denied at all times.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| _ga | First-party cookie | Google Analytics 4 (Google) | Distinguish users | 2 years |
| _ga_<container-id> | First-party cookie | Google Analytics 4 (Google) | Persist session state | 2 years |
Both cookies are first-party and their default duration according to Google is 2 years; browsers may shorten this if you do not return to the site (for example, Chrome caps it at 400 days and Safari at 7 days). Google forms the concrete _ga_<container-id> suffix from the measurement identifier, and it will be confirmed against the real cookie. Our setup is the standard Google Analytics 4 configuration and creates no advertising cookies (such as _gcl_* or DoubleClick cookies), nor additional session cookies of the _gid/_gat type, because no Google Ads account is linked.
The data-retention period within Google Analytics is set to 14 months for user and event data, with no reset on new activity. This is a separate concept from the cookie duration (see the Privacy Policy).
4. What is not loaded until you allow it
The Google map is an optional third-party element and is not activated until you give your consent:
| Element | Provider | Purpose | Where it appears | Cookies / data processed |
|---|---|---|---|---|
| Interactive map (Google Maps) | Google Ireland Ltd. / Google LLC | Show the location of the rural house on an embedded map | Contact page | When you accept this element, Google may set its own cookies (such as NID, CONSENT and others tied to its domains) and record your IP address. Their retention and processing are governed by Google's Privacy Policy. |
While you do not enable this option, the map is replaced by a static block with a button to activate it. No Google resource is downloaded and no Google server is contacted until then.
5. What this site does NOT use
- No advertising and no advertising cookies or tracking pixels (Meta/Facebook, Google Ads, etc.). We do not run remarketing or create advertising audiences.
- Analytics only works with your consent and is limited to statistical measurement (section 3). Nothing is loaded without your permission.
- Fonts are self-hosted, served from this same domain. We do not use Google Fonts or equivalent services.
- If any additional tool were added in the future, this policy would be updated and the notice shown again to request fresh consent.
6. How to give, withdraw or change your consent
On your first visit a notice appears at the bottom of the page with three equivalent options:
- Accept: allows analytics and the loading of the Google map.
- Reject: neither analytics nor the map will be activated. Only the technical storage of your preference is kept.
- Configure: opens a panel where you can turn the "Analytics" and "External content · Google Maps" categories on or off separately. Necessary items are always on.
You can change your decision at any time by clicking "Cookie settings" in the footer of any page on the site. The new choice replaces the previous one immediately. Your consent expires after a maximum of 24 months, at which point you are asked again.
If you withdraw analytics consent, measurement stops immediately: the first-party analytics cookies (_ga and _ga_<container-id>) are deleted and the page reloads without loading Google Tag Manager or Google Analytics 4. From then on, neither is loaded again until you allow it once more.
To delete the stored preference you can clear the site data from your browser (see the links below). On your next visit the notice will be shown again.
Managing from your browser
You can also review or delete storage and cookies directly from your browser's settings:
7. Legal basis
This policy complies with:
- Regulation (EU) 2016/679 (GDPR)
- Spanish Organic Law 3/2018 on Data Protection and the guarantee of digital rights (LOPDGDD)
- Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), in particular Article 22.2
- The Spanish Data Protection Agency (AEPD) guidance on the use of cookies
8. Updates
If new features involving cookies or third parties are added, this policy will be updated and consent requested again where applicable.
9. Contact
If you have any questions about this cookie policy, email us at hola@cumbresdelores.com.