Cookie Policy
This Cookie Policy explains how Donaya uses cookies and similar technologies on our website, platform, and organization microsites.
This Cookie Policy is provided in accordance with Law 34/2002 on information society services and electronic commerce (LSSI-CE), Regulation (EU) 2016/679 (GDPR/RGPD), and Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
1. Information about this Cookie Policy
Donaya uses strictly necessary cookies to make the website and platform work. We only use optional analytics, marketing, or non-essential functional cookies if you allow them, where consent is required.
You can accept, reject, or manage optional cookies through the cookie banner and through the Cookie preferences link in the footer.
2. What cookies are
Cookies are small files stored on your device when you visit a website. Similar technologies include local storage, pixels, SDKs, tags, and other tools that store or access information on your device.
3. Types of cookies Donaya uses
Strictly necessary cookies
These cookies are required for the website and platform to work. They support login, security, payments, language preferences, checkout flows, fraud prevention, and saving your cookie choices.
These cookies cannot be switched off through our cookie banner because they are necessary to provide the service.
Analytics cookies
These cookies help us understand how people use Donaya so we can improve the platform.
We only use analytics cookies if you allow them, unless a specific analytics setup is confirmed as legally exempt after technical and legal review.
Marketing cookies
These cookies may be used to measure campaigns or show relevant advertising.
We only use marketing cookies if you allow them. Donaya should avoid marketing cookies at launch unless they are truly needed.
Functional cookies
These cookies may support optional features, such as enhanced preferences, chat widgets, embedded media, maps, or other third-party tools.
We only use functional cookies if they are not strictly necessary and you allow them.
Third-party cookies
Some cookies or similar technologies may be set by third-party providers used by Donaya, such as payment, hosting, security, email, media, or analytics providers.
Third-party cookies are only treated as strictly necessary when they are genuinely required for a requested feature, such as secure checkout or account security. Analytics, advertising, remarketing, pixels, heatmaps, session replay, and similar tracking technologies normally require prior consent.
4. Cookies used by Donaya
This table will be updated after Donaya completes its final cookie audit before public launch.
| Cookie / technology | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| donaya_cookie_consent | Donaya | Strictly necessary | Stores your cookie choices | 6 months |
| donaya_session | Donaya | Strictly necessary | Keeps users logged in securely | Session / final duration to be confirmed |
| donaya_csrf | Donaya | Strictly necessary | Helps protect forms and sessions against cross-site request forgery | Session / final duration to be confirmed |
| donaya_locale | Donaya | Strictly necessary / Functional | Remembers language preference | Final duration to be confirmed |
| Stripe checkout/session cookies | Stripe | Strictly necessary | Supports secure payment and checkout flows | Set by Stripe |
| Hosting/CDN security cookies | Hosting/CDN provider | Strictly necessary | Supports load balancing, security, and fraud prevention where required | Set by provider |
| Analytics cookie or local storage | Analytics provider to be confirmed | Analytics | Helps Donaya understand platform usage if accepted | Final duration to be confirmed |
| Marketing cookie or pixel | Marketing provider to be confirmed | Marketing | Measures campaigns or supports advertising if accepted | Final duration to be confirmed |
| Optional embedded widget storage | Widget provider to be confirmed | Functional | Supports optional embedded or enhanced features if accepted | Final duration to be confirmed |
Donaya should remove any rows that do not apply after the final audit.
5. Third-party cookies and providers
Donaya may use third-party services to operate the platform. These may include payment, hosting, database, email, media hosting, analytics, support, security, or monitoring providers.
Expected providers may include Stripe, Neon/PostgreSQL, Netlify, Cloudflare, Cloudinary, Mailgun, and any analytics provider that Donaya chooses to enable.
Third-party providers may also process personal data under their own terms and policies where they act as independent controllers or provide their own regulated services, such as payment processing.
6. How to accept, reject, or configure cookies
When optional cookies are used, Donaya's first-layer cookie banner should show these options with equal prominence:
- Reject all.
- Manage preferences.
- Accept all.
No optional analytics, marketing, or non-essential functional cookies should be activated before consent.
The cookie banner copy should be:
Donaya uses necessary cookies for login, security, and payments. With your permission, we also use analytics cookies to improve the platform.
7. How to change your choice later
You can change or withdraw your cookie choices at any time through the Cookie preferences link in the footer.
When you reject optional cookies or withdraw consent, Donaya will stop loading non-essential cookies from that point forward where technically possible. Donaya should also delete non-essential cookies where technically possible.
8. Browser cookie settings
You can also delete or block cookies through your browser settings. Blocking some strictly necessary cookies may affect website or platform functionality, including login, checkout, security, and language preferences.
9. Consent duration
We store your cookie choice for up to 6 months, unless you change your preferences earlier or we make material changes to our cookie use.
Donaya should ask for consent again when:
- Consent has expired.
- The Cookie Policy materially changes.
- New cookie categories are introduced.
- New third-party tracking providers are added.
10. Updates to this Cookie Policy
We may update this Cookie Policy when we change the cookies or technologies we use.
If the change is material, we will take reasonable steps to make the change clear and request updated consent where required.
11. Contact
For questions about cookies, contact us at contacto@donaya.es.