Cookie Policy

Here we explain the cookies we use on solsano.es, their purpose and how you can manage them in accordance with the GDPR and European privacy regulations.

Last updated: 23 July 2026 · Inventory verified through a technical browser scan (Set-Cookie headers, local storage and network requests).

1. What are cookies?

Cookies are small files stored on your device when you visit a website. Among other things, they let us remember preferences, ensure security or measure aggregate use of the service.

Similar technologies may also be used (local storage, pixels, etc.). In this policy we use the term "cookies" generically to refer to all of them.

2. Data controller

The data controller is Carbosuelo SL (trading as Solsano), registered in Seville (Spain). Contact: hola@solsano.es.

3. Legal basis

Necessary cookies: legitimate interest and/or performance of a service requested by the user (Art. 6(1)(b) and 6(1)(f) GDPR), under the ePrivacy Directive exemption for strictly necessary cookies.
Analytics and marketing cookies: prior, freely given, specific and informed consent (Art. 6(1)(a) GDPR). You may withdraw it at any time.

4. Cookies and detected inventory

We classify cookies into three categories. Non-essential cookies are only activated if you give your consent. The inventory below reflects what was detected on the site as of the update date.

4.1. Necessary

Essential for the operation or security of the site. They do not require consent and cannot be disabled from the preferences panel.

Name	Purpose	Duration / attributes	Who	Where it appears
`solsano_cookie_consent`	Remember your choice (accept / reject / preferences)	6 months · `localStorage` (not an HTTP cookie)	First-party	All pages, after deciding in the banner
`solsano_contact`	PHP session for the contact form (CSRF token)	Session · `HttpOnly` · `SameSite=Strict` · `Path=/`	First-party	Pages with a form (`index`, `contacto`) when requesting the token from `/api/contact.php`
Cloudflare Turnstile	Anti-spam protection for the form. Loads scripts from `challenges.cloudflare.com`. During the scan, the script did not send a `Set-Cookie` header to the Solsano domain; Cloudflare may use its own storage on its domain for the security challenge.	As set by Cloudflare (session / technical)	Third party (security)	Only on pages with the contact form

4.2. Analytics

Not detected. No analytics cookies or scripts (Google Analytics, Matomo, etc.) appeared during the scan. If we add any, they will only load after you give consent, and we will update this table.

4.3. Marketing

Not detected. No advertising cookies or pixels were observed. If we add any, they will require your prior consent.

4.4. Third-party resources with no first-party cookies detected

External resources are loaded on all pages. During the scan no Set-Cookie header was observed from these services towards the visitor, but a network request (e.g. IP address) is made to the provider:

Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — Montserrat and DM Sans typefaces.
Tailwind CSS CDN (cdn.tailwindcss.com) — styling in the current development/deployment environment.
Lucide (unpkg.com) — icons.

These resources are not analytics or marketing cookies. If we self-host them on our own domain in the future, we will reduce third-party requests.

5. How to manage your consent

When you enter the site you can accept all, reject all or configure the optional categories. Rejecting is as easy as accepting.

You can change or withdraw your consent at any time:

By clicking the cookie button in the bottom-left corner.
By using the "Cookie settings" link in the footer.
From the button on this page.

Your choice is stored for 6 months. Once that period has elapsed, or if we make a material update to this policy, we will ask you again.

6. How to disable cookies in your browser

You can also block or delete cookies from your browser settings. Please note that if you block necessary cookies, some features of the site (such as the contact form) may stop working correctly.

7. International transfers

When loading fonts, icons, the CDN or Turnstile, providers located outside the European Economic Area (e.g. Google, Cloudflare or CDN operators) may receive technical data such as your IP address. These processing activities are based on the necessity of the service or your interaction with the form, and providers apply GDPR safeguards where applicable. We do not transfer data for marketing purposes without your consent.

8. Further information and your rights

To exercise your rights (access, rectification, erasure, objection, restriction, portability and withdrawal of consent), or to raise any query, write to hola@solsano.es. You may also file a complaint with the Spanish Data Protection Agency (AEPD).