Privacy policy
October 27, 2026
Draft pending legal review. Company details marked [PENDIENTE] will be completed before launch.
Who we are
Cookigator is operated by [PENDIENTE: razón social] ([PENDIENTE: NIF/CIF]), [PENDIENTE: dirección]. Contact: hola@cookigator.com.
Data about our customers
When you create an account we process your name, email, password (stored only as a hash) or your Google account identifier, your interface language and, if you add them, your tax details.
We use them to provide the service, bill you, send you service emails (verification, password reset, usage and billing notices) and meet our legal obligations. Legal basis: performing our contract with you and legal obligations.
Data about visitors to our customers' websites
When a visitor makes a choice on a banner served by Cookigator, we store a random consent ID, the categories chosen, the action, the date, the banner version, the website domain, an anonymised IP address (last part removed), the country derived from it and the browser user agent.
For this data our customer is the controller and Cookigator acts as processor, on the customer's instructions and under a data processing agreement (DPA). We use it only to prove consent and to calculate usage.
Service providers
We rely on these providers, bound by data processing agreements:
• Vercel Inc. (hosting and content delivery)
• Neon Inc. (database, servers in Frankfurt, EU)
• Stripe Payments Europe Ltd. (payments and billing)
• Resend (transactional emails)
• Google LLC (Sign in with Google, only if you choose it)
International transfers
Our database is in the EU. Some providers are based in the United States; transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
Account data: while your account is active and up to 6 years afterwards for tax purposes. Consent records: for the period the customer configures, and by default for as long as the customer's site is active, so they can prove consent.
Your rights
You can access, rectify, erase, restrict, object to and port your data by writing to hola@cookigator.com. You can also complain to your data protection authority (in Spain, the AEPD).
Changes
If we change this policy we'll update the date above and, if the change is important, let you know by email.