Who this policy applies to
This policy applies to the public website used to present the company, publish legal information, receive contact requests and, where enabled, offer a consultation booking flow.
It covers cookies, local storage, pixels, tags, browser identifiers, software development kits and similar technologies that store information on or access information from a visitor device.
What cookies and similar technologies are
Cookies are small text files or comparable browser technologies that can remember state, recognize a browser or support a service across page loads and visits.
Depending on their purpose and configuration, these technologies may be strictly necessary for the website to function, or they may be optional and used for measurement, preferences, fraud prevention or third-party functionality.
How international privacy rules affect this site
For visitors in the EEA, the UK and Switzerland, non-essential cookies and similar technologies should generally be activated only after valid consent. Technologies that are strictly necessary to provide the site or a service expressly requested by the visitor may generally be used without prior consent.
For visitors in the United States, cookie identifiers and similar online identifiers may be treated as personal information or personal data under applicable state privacy laws when they can identify, relate to or reasonably be linked to a consumer, household or device.
Where a state privacy law grants a right to opt out of targeted advertising, profiling or the sale or sharing of personal information, the operator should ensure that any future advertising or cross-site tracking setup is deployed only together with the required notices and opt-out controls. The current public website is not intended to rely on advertising cookies for cross-context behavioral advertising.
This policy supports transparency, but full compliance also depends on the live production configuration, vendor contracts, records of consent, retention settings, international transfer safeguards and operational practices adopted by the site operator.
Categories of technologies used on this site
The categories below describe the technologies that the current website architecture uses or is prepared to use.
In the current live consent setup, the cookie banner presents strictly necessary technologies and analytics. Consent-preference storage supports that banner flow.
Strictly necessary technologies
- Laravel creates a session cookie named softwapp_session to maintain secure session state, protect forms and preserve basic request continuity. In the repository default configuration, the session lifetime is 120 minutes of inactivity.
- Laravel can also use an XSRF-TOKEN cookie to support cross-site request forgery protection for interactive requests and form security.
- The site stores the visitor language choice in session so the selected locale can persist across public routes during the session.
- Cloudflare Turnstile is enabled for spam and abuse protection on the contact flow. Turnstile may use its own cookies or similar browser signals as part of bot-detection, security and fraud-prevention checks, and related Cloudflare security cookies may appear depending on the challenge flow.
Preference and consent technologies
- The built-in Silktide consent manager is enabled in the current configuration. It may store the visitor cookie preferences so those choices can be respected on later page loads. This supports the consent flow but is not currently exposed as a separate optional toggle in the banner.
Analytics and measurement technologies
- Google Tag Manager is enabled for measurement, and the site initializes analytics storage as denied by default until the visitor gives or refuses consent through the consent manager.
- When analytics tools are enabled, the exact cookies or identifiers may vary by provider, browser and deployment settings, and those providers may apply their own retention periods.
Third-party services relevant to cookies
This website relies on first-party technologies and may use the enabled third-party integrations listed below:
- Laravel session management for core site operation, including the softwapp_session session cookie and XSRF-TOKEN where form or request protection requires it.
- Silktide Consent Manager for visitor consent preferences when the consent manager is enabled.
- Google Tag Manager for optional tag and measurement deployment when analytics is enabled.
- Cloudflare Turnstile for anti-spam and anti-abuse protection when enabled on the contact form.
How visitors can manage their choices
Visitors can manage cookies and similar technologies using several layers of control.
- Use the consent banner or preference center, where available, to accept, reject or revisit optional technologies.
- Use browser or device settings to block, delete or limit cookies, local storage or similar identifiers.
- Where consent is the legal basis, withdrawing consent does not make earlier processing unlawful, but it should stop future optional storage or access from the moment the withdrawal takes effect.
- If future deployments introduce targeted advertising, cross-context behavioral advertising, sale or sharing of personal information through cookie-based technologies, the site operator should provide a compliant opt-out method and honor applicable browser-based privacy signals where required by law.
- Use the public contact channel to ask questions or exercise privacy rights connected to cookies, identifiers or tracking technologies.
International transfers and cross-border processing
Softwapp is based in Spain and may use service providers that process data in other countries. Where cookies or similar technologies involve personal data, related international transfers should be handled under the safeguards, contracts and transfer mechanisms described in the applicable privacy documentation and vendor arrangements.
Retention and duration
Some technologies are session-based and expire when the browser session ends or after a configured inactivity period. In the repository default configuration, the main Laravel session lifetime is 120 minutes.
Other technologies may persist for longer periods depending on browser settings, consent records, analytics provider configuration or third-party embed behavior. Exact durations can therefore vary across deployments and providers.
Children and minors
This public website is not directed to children under 13 and is not designed to knowingly use optional tracking technologies for a child audience. If the operator learns that personal information from a child has been collected through this site in a way that requires action, the operator should review and delete that information where appropriate and consistent with applicable law.
Changes to this policy
The website operator may update this policy when the website configuration, service providers, legal requirements or consent practices change. The revision date shown on this page should be updated when a material change is published.
Contact and related privacy information
For broader information about personal data processing, please review the Privacy Policy and use Contact.
The website operator for public legal and privacy matters is Daniel Castelló Yuste, located at Calle Colón, 42, 2, 1, Moncada, Valencia 46113, Spain. Privacy inquiries may also be sent to privacy@softwapp.com.