Last updated: 13 September 2026 · Version 4
This Cookie policy forms part of the Privacy policy for wiset.es. It describes cookies and similar technologies under Article 22.2 of Spain’s Law 34/2002 (LSSI-CE) and the Spanish Data Protection Agency’s cookie guidance.
1. What are cookies?
A cookie is a small text file stored in your browser to recognise later visits, remember preferences or measure use. This policy also covers similar technologies such as localStorage, sessionStorage and device identifiers with equivalent functions.
2. Purposes
- Technical and necessary: basic navigation, requested functionality and consent records; strictly necessary storage does not require prior consent under Article 22.2 LSSI-CE.
- Preferences: settings such as your selected language.
- Analytics: optional measurement of how the site is used, requiring acceptance.
- Security: recognising legitimate traffic and blocking automation, where necessary to provide the service you request.
- Marketing and advertising measurement: measuring Wiset campaigns on Meta (Facebook/Instagram). These cookies require express acceptance and are not activated if you reject.
- Advertising on the Website: wiset.es does not display ads. Advertising in the mobile free plan is covered by the Privacy policy.
3. Cookie and storage inventory
The following technologies may be used on wiset.es. Items requiring acceptance only activate through the corresponding control. Viewer-specific acceptance does not enable PostHog cookies or Meta; viewer events use an identifier held only in memory.
| Name | Provider | Type | Purpose | Duration | Choice |
|---|---|---|---|---|---|
| wisetViewerAnalyticsConsent (localStorage) | wiset.es | Preference | Records the choice, version and date for optional viewer analytics. It contains no tracking or reservation identifier. | Until you change the choice or clear storage. | Records your preference; usage events require acceptance. |
| wiset_guest_v1 | wiset.es | Functional, HttpOnly | Recognises guest reservations and allows release from the same browser without requesting a name. Clearing it removes that access. Not used for analytics or advertising. | One year, renewed when a shared list is opened. | Used to provide the requested reservation service. |
| wisetConsent (localStorage) | wiset.es | Technical | Records acceptance or rejection of website analytics and the notice version. | Until you revoke consent or clear browser storage. | Stores the consent preference. |
| NEXT_LOCALE | wiset.es (Next.js) | Preference | Remembers the chosen language between pages and visits. | One year. | Language preference. |
| __cf_bm | Cloudflare, Inc. | Security | Distinguishes human traffic from automated traffic in CDN bot management. | 30 minutes. | Strictly necessary security. |
| cf_clearance, _cfuvid | Cloudflare, Inc. — Turnstile | Security | Anti-bot verification when submitting public forms such as the newsletter. | Session / up to 30 minutes. | Security needed for the requested service. |
| ph_* cookies and PostHog localStorage entries | PostHog Inc. (EU region) | Analytics | Measures website page views, events and journeys using a pseudonymous browser identifier across visits. The shared-list viewer excludes this capture and has separate optional measurement without analytics cookies. | Up to 13 months. | Requires acceptance. |
| _fbp and Meta Pixel events | Meta Platforms Ireland Ltd. | Marketing / advertising measurement | Attributes visits and conversions to Facebook/Instagram campaigns and builds audiences for subsequent campaigns. Meta and Wiset jointly control initial collection and transmission. | 90 days for _fbp. | Requires acceptance; viewer-specific acceptance does not enable Meta. |
The inventory can change with provider updates. Newly detected storage is documented and a material consent change updates the notice version, so previous acceptance is no longer used and the banner appears again.
4. Providers and international transfers
Cloudflare, PostHog and Meta provide third-party services. Cloudflare is based in the US, with transfers under Standard Contractual Clauses and/or the EU–US Data Privacy Framework. PostHog analytics uses its EU region. Meta Platforms Ireland Ltd. is a joint controller, with subsequent US transfers to Meta Platforms, Inc. under SCCs/DPF. See section 5 of the Privacy policy for the applicable safeguards.
5. Managing consent
The shared-list viewer optionally measures visits, confirmed reservations/cancellations and the create-list button through PostHog in the EU. Its random in-memory visit identifier is not linked to an account, list, product or reservation cookie. This channel does not send names, gifts, links or the visitor’s IP address to PostHog. This measurement uses neither the SDK nor Meta. Valid website analytics acceptance is honoured unless you reject in the viewer; the separate footer control lets you accept or turn it off without enabling advertising. DNT/GPC block these events. Activity before acceptance is not reconstructed and visits are not linked.
General Website pages show equally accessible Accept and Reject options. No optional analytics cookies are installed before you choose. You can change the Website choice below:
Clearing the site’s browser data also removes stored choices; the relevant notice appears again next time. Clearing the functional guest cookie also removes your access to releasing existing reservations. Rejecting analytics alone does not remove that functional cookie or affect reservations.
6. Browser controls
You can also block, restrict or remove cookies through browser privacy settings. Blocking technical or security storage may prevent some features, including forms and recognising a guest reservation.
7. Mobile Application and browser extension
The mobile Application uses local storage, session tokens and equivalent identifiers rather than browser cookies, including IDFA/AAID advertising identifiers on the free plan. These are covered by operating-system permissions (Apple ATT and Google UMP) and the Privacy policy.
The Chrome Extension has separate local storage. From version 2.2.0, not yet available in the store, it will record optional analytics choices by account and a pending save operation when needed to recover a result. It does not use the guest viewer cookie for those purposes. Its data, controls and retention criteria are described in section 2.2 of the Privacy policy.
8. Changes
This policy may change with technologies, providers or AEPD guidance. Material changes receive a new version and, when they affect consent, a new notice. Information about cookies and your rights is available from the AEPD.