Cookie Policy
Last updated: October 2026
1. What are cookies?
Cookies are small text files that a website stores in your browser when you visit it. They are used to remember preferences, keep sessions active, and in many cases, track browsing behaviour for advertising or analytics purposes.
Article 22.2 of the LSSI-CE, which applies the ePrivacy Directive in Spain, requires us to tell you which cookies and similar technologies we use and to ask for your consent for those that are not strictly necessary.
2. Our approach: minimal cookies
NeoCompás has designed this site with a minimal cookie policy. We count visits with Umami, an analytics tool we host on our own server that sets no cookies, so counting requires no consent. We ask your permission for one thing only: recording how the site is used, to improve it (section 3.4).
✓ Cookieless analytics
Umami sets no cookies and its data never leaves our server. We do not track you across sites. We do not sell behavioural data. Session recording only starts if you accept it.
3. Cookies and storage we use
This inventory was measured on 5 and 6 October 2026 and updated on 26 October 2026, when we changed analytics tool. On public pages, the only cookie the site itself sets is the language one; in your browser’s local storage it keeps only your choice about session recording.
3.1 Our own technical cookies and storage
They remember the language and your privacy choice, and keep clients signed in to the portal. They do not require consent (Art. 22.2 LSSI-CE).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| NEXT_LOCALE | neocompas.com | Remembers the language (Spanish or English) in which you view the site. | Session |
| sb-…-auth-token | neocompas.com (Supabase Auth) | Keeps the client signed in to the portal. Set only on sign-in. | Up to 400 days, or until you sign out |
| neocompas:consent | neocompas.com (local storage) | Keeps whether you accept or reject session recording (section 3.4), so we do not ask again. | 12 months; then you are asked again |
3.2 Booking calendar (Cal.com)
On the Contact page, the Cal.com calendar loads only when you press “Show the calendar”. At that moment your browser connects to Cal.com’s servers and to an error-logging service used by Cal.com (Sentry), which receive your IP address, and this security cookie is set:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare (cal.com) | Tells real visitors from automated programs to protect Cal.com’s service. | 30 minutes |
Cal.com, Cloudflare and Sentry are US companies. The safeguards for that transfer are explained in section 6 of the Privacy Policy.
If you complete a booking, Cal.com may set further cookies of its own that the process needs. See its policy at cal.com/privacy.
3.3 Analytics (Umami — cookieless)
Umami sets no cookies and writes nothing to your browser’s storage. To count visits, our server computes an identifier from your IP address, your browser and a value that changes every month, and does not store the IP. That identifier is pseudonymous: for a month it groups the pages one browser views from one connection, but it does not say who you are and cannot follow you across sites. Umami only reads one local-storage flag, umami.disabled, which exists only if you created it so that your visits are not counted.
Umami runs on our server (stats.neocompas.com, in Germany) and sends data to no one else, not even the company that develops it. Visits to the surveys, the Client Portal, the admin panel and the content manager are not counted. Which data is kept, and for how long: Privacy Policy.
3.4 Session recording and heatmaps (only with your consent)
If you press “Accept” in the privacy notice, your browser also loads a second Umami program that records how you use the page: its structure, clicks, scrolling and mouse movement. That lets us replay a visit and see heatmaps of where people click. All page text and everything you type is hidden, and forms are not recorded. Only some visits are recorded, each recording lasts at most 5 minutes, and nothing is ever recorded on the contact page, the surveys, the Client Portal, the admin panel or sign-in. It sets no cookies: the data goes to our server, stats.neocompas.com. Recordings are deleted after 30 days and heatmaps after 90. If you do not accept, that program is not loaded.
You can change your choice at any time, with this button or with “Privacy settings” at the foot of every page. Withdrawing consent stops sending at once.
3.5 Studies and surveys (local storage)
When you answer a NeoCompás survey, your answers are saved in your browser’s local storage so you can continue later on the same device. This is necessary for that service and does not require consent. Once the server confirms it has received the finished survey, the local copy of your answers is deleted. Survey pages have no analytics and no third-party connections; the only cookie is the language one. More detail in the study’s privacy notice.
3.6 Admin panel cookies (Sanity Studio — editors only)
The content management panel at /studio uses Sanity authentication session cookies. They are set only when an editor signs in to the panel.
4. Third-party cookies we do NOT use
For full transparency, we confirm that neocompas.com does not use:
- →Advertising or retargeting cookies (Google Ads, Meta Pixel, etc.)
- →Google Analytics or any other cookie-based analytics tool.
- →Social media tracking pixels.
- →A/B testing tools with cookies.
- →Live chat services with third-party cookies.
5. How to manage and delete cookies
You can manage cookies from your browser settings:
Note that blocking Cal.com cookies may stop the booking calendar from working, and blocking the portal’s cookies prevents signing in.
Session recording does not depend on your cookie settings: accept or reject it with “Privacy settings” at the foot of every page.
6. Changes to this policy
We will update this Cookie Policy when we change the tools we use or when applicable legislation requires it. The date of the last update appears at the top of this document.
For any query: info@neocompas.com