Only what the journey needs

1. What is used now

• Necessary authentication and security cookies for signed-in administration, including HttpOnly session protection and CSRF controls.
• Session storage for the guest owner capability and temporary upload-journey state. It normally clears when the browser tab or session ends and is never used for advertising.
• Local storage for a display preference such as light or dark theme.
• Stripe may set its own strictly necessary fraud-prevention and checkout storage when you open its hosted payment page, under Stripe's own notice.

2. Why no consent banner appears

Storage that is strictly necessary to provide a service you request does not normally require prior cookie consent. Because the current public journey has no optional analytics, advertising or personalization storage, showing an accept/reject banner would create a choice with nothing optional behind it.

If optional technology is introduced, it stays off until you make a free, specific choice. Rejecting it must be as easy as accepting it, withdrawal must remain available, and the page and retention table will be updated before activation.

3. Your controls

You can clear site data in your browser. Clearing a guest owner capability can prevent that browser from reopening an unfinished order, although an email recovery link may still work. Blocking necessary storage may stop checkout, owner controls or sign-in from functioning.

This notice is not a claim of legal certification. The live cookie scan and consent configuration require owner and EU/Spanish legal approval before launch and after every material tracking change.