Cookie policy

1. What cookies are

A cookie is a small text file that a website stores on your device when you visit it, to remember information about your browsing. We also use the browser's local storage for the same technical purpose.

2. Cookies we use

This site uses only technical, first-party cookies and storage, essential for it to work, which do not require consent:

  • Theme (webtheme): remembers your light/dark mode preference (local storage, no expiry).
  • Session (PHPSESSID): only on the payment page, to keep the form secure while you complete it. It is deleted when you close the browser.
  • Consent (qs_consent): remembers whether you accepted or turned off advertising cookies, so we do not ask again (12 months).

3. Visit measurement

We measure visits with Umami, a self-hosted, first-party analytics tool: it runs on a server of ours (m.geg.es), and the data is never shared with third parties or used for advertising.

  • Where: on this website, in the management panel and in the venues' published menus.
  • No cookies: it stores no cookie and no identifier on your device, neither during your visit nor between visits.
  • What is recorded: the page viewed, where you came from, the language, the browser and device type, and the country. None of it identifies you.
  • Your IP is not kept: it is used only at that moment, to work out the country and to derive an anonymous session identifier that is renewed daily.

Because it neither stores nor reads information on your device, this measurement falls outside the prior consent that cookie rules require (art. 22.2 of Spain's LSSI); the processing relies on our legitimate interest in knowing how the service is used (art. 6.1.f GDPR).

4. Advertising and third-party cookies

This site uses the Meta pixel, a measurement tool from Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). It lets us know which of our ads on Facebook and Instagram bring visits, and measure how many of those visits end in a sign-up.

  • Purpose: measuring advertising campaigns and building audiences for our ads.
  • What we send: the page visited and the type of action (viewing the pricing page, opening a contact channel, completing a sign-up). We never send your name, email address or phone number, and advanced matching is disabled.
  • Cookies: _fbp (first-party, 90 days) and, where applicable, _fbc if you arrive from one of our ads. Meta may also read its own fr cookie.
  • Transfers: Meta processes this data in the European Union and may transfer it to the United States under its own safeguards. Details in Meta's privacy policy.

Panama's Law 81 of 2019 on Personal Data Protection requires that you be informed and that you can object; it does not impose the prior consent European sites ask for. That is why the pixel is active from your first visit and you can turn it off in one click, here or in the notice at the bottom of the page. Your choice is stored in the qs_consent cookie for 12 months and honoured on every later visit.

The visit measurement in section 3 is first-party and cookie-free, so it does not depend on this choice and is not turned off by it. We do not use Google Analytics.

5. Turning advertising on or off

6. The venues' menu

Each restaurant's public menu uses no cookies and does not identify the diner. Visits are counted in two ways, both first-party: the service's own aggregate count, and the self-hosted analytics described in section 3. Neither keeps your IP address, and neither shares anything with third parties.

7. How to manage them in your browser

You can delete or block cookies from your browser settings (Chrome, Firefox, Safari, Edge, etc.); check your browser's help section. For any questions, write to equipo@qartscan.com.