Cookie Policy — My Tails
Version 2.0 · In force since 22 July 2026 · Supersedes the May 2026 version · History: mytails.eu/legal/historial
This Policy is issued in compliance with Article 22.2 of Law 34/2002 (LSSI-CE), the AEPD Guide on the use of cookies (2023 edition, 2024 update) and Article 6.1.a of Regulation (EU) 2016/679 (GDPR).
Data controller: Natalia Grishchenko, NIF Z4429651V, Av. Carlota Alessandri 234, 29620 Torremolinos, Málaga, Spain, Spain. Contact: hello@mytails.eu.
1. What cookies are
Cookies are small text files that the website saves in your browser. We also use browser local storage (localStorage and sessionStorage): this is a different technology, but legally the same rules apply, so we describe it here alongside cookies (section 4).
2. How we ask for your consent
On your first visit you will see a banner with four options: "Accept all", "Reject all", "Configure" and —within the settings— "Save selection".
- The "Accept all" and "Reject all" buttons have the same size, colour and visibility, and appear in the first layer of the banner.
- No optional toggle is enabled in advance.
- Until you press one of the buttons, no optional script is loaded and no optional cookie is installed.
- Closing the banner with the cross or scrolling the page is not considered consent.
- You can withdraw or change your decision at any time through the "Cookie settings" link in the footer, with the same two clicks you used to give it.
We keep your choice for 12 months; after that we ask again. If you rejected, the banner is not shown again during that period.
We record evidence of your consent (date, time, version of this Policy, categories selected and hashed IP address) — this is a requirement of Article 7.1 of the GDPR on the demonstrability of consent. Records are automatically deleted after 3 years.
3. Which cookies we use
3.1 Strictly necessary — no consent required
Without them the site does not work or works insecurely. They are covered by the exception in Article 22.2 of the LSSI-CE. They cannot be disabled.
| Cookie | Who sets it | Purpose | Duration |
|---|---|---|---|
mtConsent |
My Tails | Stores your cookie choice so we don't ask again | 12 months |
session_id |
My Tails | Maintains your session on the site | Browser session |
auth_token |
My Tails | Maintains login to your account | 30 days |
csrf_token |
My Tails | Protects forms against request forgery | Browser session |
NEXT_LOCALE |
My Tails | Remembers the chosen interface language | Browser session |
__stripe_sid |
Stripe | Payment-session security, fraud detection | 30 minutes |
__stripe_mid |
Stripe | Device identification to protect the payment against fraud | 1 year |
_GRECAPTCHA |
Distinguishes people from bots in the registration, login and contact forms. Only set on pages with these forms | 6 months | |
__cf_bm, cf_clearance |
Cloudflare | Protection against automated attacks. Set only when the security check is triggered, not on a normal visit | up to 30 minutes |
3.2 Preferences — consent required
They remember your settings so you don't have to set them again: search filters, city and display units.
As of today, My Tails does not set any cookie in this category. The category appears in the banner because the corresponding functionality is being prepared; the table will be completed and this Policy updated before the first such cookie appears.
3.3 Analytics — consent required
They help us understand which pages are useful and where users encounter difficulties. They are set only after you press "Accept all" or activate this category in the settings.
| Cookie | Who sets it | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 (Google Ireland Limited) | Distinguishes visitors | 13 months |
_ga_DWBYBWLP8C |
Google Analytics 4 | Retains the session state for our GA4 property | 13 months |
We use Google Analytics 4 with IP-address anonymisation enabled. The retention period for event data in the service itself is 14 months, after which Google deletes it.
We have Google Consent Mode v2 enabled: if you reject, Google tags work in basic mode and do not collect behavioural data about individual users.
3.4 Marketing — consent required
They allow us to measure the effectiveness of our advertising campaigns and show MyTails offers on other sites.
As of today, My Tails does not set any cookie in this category or use advertising pixels. If we connect advertising tools, the corresponding table will appear in this Policy before its first activation and the banner will be updated.
4. Browser local storage
| Key | Storage | Purpose | Category | Duration |
|---|---|---|---|---|
mytails-theme |
localStorage | Remembers the light or dark theme. Not transmitted to our servers | Strictly necessary | Until browser data is cleared |
| Session cache | sessionStorage | Brief cache so pages load faster | Strictly necessary | Until the tab is closed |
5. Who else receives data
We do not sell data or share it with advertising intermediaries. The data collected via cookies is received by:
| Recipient | What it receives | Where it processes it |
|---|---|---|
| Google Ireland Limited / Google LLC | Anonymised visit statistics (only with your consent); reCAPTCHA check result | Ireland and USA |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Technical signals to protect the payment against fraud | Ireland and USA |
| Cloudflare, Inc. | Technical request data when bot protection is triggered | Nodes in the EU; the company in the USA |
Transfers to the USA are made under the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), of which Google LLC, Stripe, Inc. and Cloudflare, Inc. are participants, and additionally under the Standard Contractual Clauses (SCC) approved by the Commission.
6. How we manage consent
My Tails uses its own consent-management mechanism, built into the platform (we do not use external CMPs such as Cookiebot or Usercentrics). This mechanism:
- records your consent with date, time and version of this Policy;
- blocks the loading of all non-technical scripts until consent is obtained — the tags don't merely "not collect data": they physically do not load;
- allows consent to be withdrawn as easily as it was given;
- respects the Global Privacy Control (GPC) signal if your browser sends it: in the presence of the signal, the analytics and marketing categories are considered rejected without showing the banner.
7. How to delete cookies from your browser
In addition to our settings, you can manage cookies with your browser's tools: Google Chrome · Mozilla Firefox · Safari · Microsoft Edge. Deleting strictly necessary cookies may affect the operation of the site.
8. Changes
We update this Policy whenever a new service that sets cookies is connected — before its first activation. Substantial changes are announced by showing the banner again. Version history: mytails.eu/legal/historial.
9. Contact and complaints
Questions about the use of cookies: hello@mytails.eu. More information about the processing of personal data in the Privacy Policy.
You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
Cookie Policy — My Tails. Version 2.0 · In force since 22 July 2026 · Supersedes the May 2026 version · History: mytails.eu/legal/historial.