This policy explains which cookies and similar technologies take part in hodeishield.com, under Article 22.2 of the LSSI-CE, the GDPR and the LOPDGDD.
This site uses strictly necessary technologies, which do not require consent, and, only if you accept them, third-party cookies and similar technologies for analytics or advertising. Until you choose, none of them is loaded.
1.What cookies are
Cookies are small files a website stores on your device. They are classified by ownership (first or third party) and by purpose (technical, preference, analytics or advertising). This policy also covers similar technologies, such as the browser's local storage (localStorage). Only those strictly necessary to provide the requested service or for security are exempt from consent.
2.Categories
- Necessary: essential to remember your cookie choice and for the security of the demo and beta forms. Always on; they do not require consent.
- Analytics: measure how the site is used (for example, which pages are visited and which calls to action are clicked) so we can improve it. They require your consent.
- Advertising: measure whether Hodeitek's ads on the listed platforms lead to a demo or beta request and let us build audiences to show you ads again. They share data about your browsing with those platforms. They require your consent.
3.How consent works
- First layer: when you arrive, a notice offers three options with the same visual weight: “Reject all”, “Customize” and “Accept all”, and tells you that you can change your mind at any time. Rejecting costs you nothing: the site works the same.
- Second layer: under “Customize” you can accept or reject each category separately and see the providers in each.
- Without consent, nothing loads: until you choose, no third-party script is downloaded, no requests are sent to those providers and none of their cookies is set.
- Change or withdraw your choice: at any time, with the “Cookie settings” link in the page footer. Withdrawal takes effect immediately and the page reloads to stop the scripts.
- Validity: your choice is kept for 13 months. You are asked again sooner if this policy, the notice or the list of providers changes.
- Record: we keep a record of your decision so we can prove it, without your IP or data that identifies you (see the Privacy Policy).
4.What this site uses
The language is determined by the address (/es, /en, /de, /fr, /it, /eu) and is not stored in any cookie. The names and durations of third-party items are set by each provider and may change; those listed are the ones observed in our tests or, where marked “may be set”, the ones the provider documents but we have not observed. Some browsers limit the lifetime of first-party cookies (for example, to 400 days).
Necessary
| Name | Provider | Purpose | Duration | Type | Category |
|---|---|---|---|---|---|
hodeishield-consent-v1 (local storage) | HODEITEK S.L. | Stores your cookie choice, the date and the versions of this policy and of the notice. Created when you decide. | 13 months | First party | Necessary |
| Cloudflare Turnstile (challenges.cloudflare.com), on the demo and beta forms | Cloudflare, Inc. | Verify that the submission is made by a person and prevent spam and abuse | Set by Cloudflare | Third party | Necessary (security) |
| Technical cookies or headers of the Cloudflare edge (CDN) | Cloudflare, Inc. | Secure delivery and protection against malicious traffic | Set by Cloudflare | Third party | Necessary (security) |
Cloudflare determines the name and duration of these technical items and may change them. More information in the Turnstile privacy addendum and the Cloudflare privacy policy.
Google Analytics 4 (analytics)
| Name | Provider | Purpose | Duration | Type | Category |
|---|---|---|---|---|---|
_ga | Google Ireland Limited / Google LLC | Distinguish users in a pseudonymised way to measure site usage | 2 years according to Google (some browsers cap it, for example at 400 days) | First party (set by the Google script on the site's domain) | Analytics |
_ga_<ID> (one ID per property) | Google Ireland Limited / Google LLC | Keep the session state | 2 years according to Google (some browsers cap it, for example at 400 days) | First party | Analytics |
Meta Pixel (advertising)
| Name | Provider | Purpose | Duration | Type | Category |
|---|---|---|---|---|---|
_fbp | Meta Platforms Ireland Limited / Meta Platforms, Inc. | Identify the browser to measure visits and ad effectiveness. Set by the Meta pixel when it loads. | 90 days | First party | Advertising |
fr (may be set) | Meta Platforms Ireland Limited / Meta Platforms, Inc. | Advertising and measurement of Meta ads. Documented by Meta; we have not observed it. | 90 days | Third party (facebook.com) | Advertising |
_fbc | Meta Platforms Ireland Limited / Meta Platforms, Inc. | Store the click on a Meta ad (fbclid) to attribute the conversion. Only if you arrive from an ad. Set by this site, only if you accept advertising, from the click identifier it keeps in the page's memory; the Meta script may also set it. | 90 days | First party | Advertising |
LinkedIn Insight Tag (advertising)
| Name | Provider | Purpose | Duration | Type | Category |
|---|---|---|---|---|---|
bcookie | LinkedIn Ireland Unlimited Company / LinkedIn Corporation | Browser identifier to measure advertising and detect abuse | 1 year | Third party (linkedin.com) | Advertising |
li_gc | LinkedIn Ireland Unlimited Company / LinkedIn Corporation | Store the consent of visitors who are not members for non-essential cookies | 6 months | Third party (linkedin.com) | Advertising |
lidc | LinkedIn Ireland Unlimited Company / LinkedIn Corporation | Select the data centre that serves the request | 24 hours | Third party (linkedin.com) | Advertising |
__cf_bm | Cloudflare, Inc. (through LinkedIn) | Bot detection on LinkedIn's servers | 30 minutes | Third party (linkedin.com) | Advertising |
li_fat_id, li_sugr, UserMatchHistory, AnalyticsSyncHistory, lms_ads, lms_analytics (may be set) | LinkedIn Ireland Unlimited Company / LinkedIn Corporation | Indirectly identify the visitor to measure conversions, sync advertising identifiers and build audiences. Documented by LinkedIn; we have not observed them. | Between 30 and 90 days according to LinkedIn | First or third party | Advertising |
5.Google Consent Mode
Google's tags use Consent Mode v2. In plain words: when they load, the four signals (analytics storage, advertising storage, user data for advertising and ad personalisation) start as “denied”. When you choose, we send Google your decision as “granted” or “denied” for each one, and Google adjusts the behaviour of its tags to those signals. If you deny advertising, we also ask Google to remove click and advertising identifiers from requests.
Hodeitek's Google Analytics property is linked to its Google Ads account to import completed requests as conversions. The signals above accompany that data: if you deny advertising, Google receives “denied” for user data for advertising purposes and for ad personalisation.
6.Withdrawing consent and third-party cookies
When you withdraw consent, the site deletes the first-party analytics and advertising cookies and the associated local storage, and reloads the page so the scripts stop running.
Third-party cookies are stored on each provider's domain, and this site cannot delete them. They stay in your browser until they expire or you delete them, even though the site no longer loads those providers' scripts. You can delete them in your browser settings and manage personalised advertising directly with each provider:
- Google Analytics opt-out browser add-on
- Activity from other businesses (Meta)
- LinkedIn advertising controls
- If you are a LinkedIn member, you can also manage this in your account settings, under advertising data.
- Your Online Choices (EDAA), for personalised advertising without an account
7.How to manage or delete cookies
Besides the “Cookie settings” link in the page footer, you can block or delete cookies in your browser settings. Blocking Cloudflare's security technologies may prevent the demo and beta forms from being submitted. If you cannot use the forms, write to privacy@hodeitek.com.
8.Console and documentation
The console (app.hodeishield.com) and the documentation (docs.hodeishield.com) are separate services with their own policies; this page covers hodeishield.com only.
9.Controller and rights
The controller is HODEITEK S.L. (NIF B56478027, Markole, Aretxabaleta, 20550, Gipuzkoa). You can exercise your rights by writing to privacy@hodeitek.com and complain to the AEPD. More information in the Privacy Policy.
10.Updates to this policy
Hodeitek may amend this policy for legal or technical reasons. The date of the last update appears at the top of the document.
If this policy, the cookie notice or the list of providers changes, we will ask for your choice again.