Cookie Policy
Version 2.0 — 20 August 2026 (2.0: introduction of optional web analytics — Google Analytics via Google Tag Manager — subject to prior consent)
1. What cookies are
Cookies and similar technologies (local storage, pixels) are files or records a website can store on or read from your device. Their use is governed by art. 22.2 of Spanish Law 34/2002 (LSSI-CE) and the guidance of the Spanish Data Protection Agency (AEPD).
2. What this Site uses
mellisma.com uses only the technologies in the table below. No analytics technology runs before you accept it: until then the Site loads no Google code and sends no data to Google (Google's basic consent mode, Consent Mode v2). We use no advertising, personalisation or cross-site tracking cookies.
| Name | Provider | Purpose | Category | Party | Duration | When set |
|---|---|---|---|---|---|---|
mellisma-consent (localStorage) | Mellisma (own) | Remember your cookie choice (version, analytics yes/no, date) | Strictly necessary — exempt from consent | First | Until you delete it; your choice is renewed at most every 24 months or if purposes change | When you press Accept, Reject or Save choice |
_ga | Google (Google Ireland Limited) | Analytics: distinguish visitors in aggregate | Analytics — requires consent | First-party (set by Google Analytics) | Up to 2 years per Google documentation; observed browser duration: ~13 months (browser cap; verified 2026-08-21) | Only after accepting "Analytics" |
_ga_<id> | Google (Google Ireland Limited) | Analytics: maintain Google Analytics 4 session state | Analytics — requires consent | First-party (set by Google Analytics) | Up to 2 years per Google documentation; observed: ~13 months (verified 2026-08-21) | Only after accepting "Analytics" |
The inventory above is verified against real browser behavior on every relevant deployment; if the live implementation adds or changes any cookie, this table will be updated with the observed values.
3. Consent, rejection and withdrawal
On your first visit a notice lets you Accept, Reject or Configure analytics, with
equal visibility at the same level. Rejecting does not limit your use of the Site. Continuing
to browse without deciding activates no analytics. You can change or withdraw your consent at
any time via "Cookie settings" in the footer: on withdrawal, analytics stops running
immediately and accessible _ga cookies are removed; data already lawfully collected before
withdrawal is not affected.
4. Strictly necessary infrastructure technologies
The Site is served through Cloudflare's infrastructure. In certain security circumstances (e.g. attack mitigation) that infrastructure may set technical, strictly necessary cookies exempt from consent under art. 22.2 LSSI-CE. As of this version, our deployment audit has detected none. If a later verification detects one, this Policy will be updated identifying it with its real name, purpose and duration.
5. Contact form
Submitting the contact form transmits the data you enter to our endpoint (see the Privacy Policy); it sets no cookies or identifiers on your device, and it works equally if you reject analytics.
6. Updates
The current version of this Policy, with its date, is the one published on this page. A material change of purposes will trigger a new consent request.