Cookie policy
Last updated: 16 September 2026
1. What a cookie is
A cookie is a small text file that a website stores on the computer or device of the person visiting it, and which it can retrieve on later visits. The same name also covers other techniques for storing and retrieving data on the user's terminal, such as the browser's local storage or tracking pixels.
Cookies allow very different functions: some are essential for the page to be served and delivered securely, others measure audiences and others build profiles for advertising purposes. How each one is treated in law depends on what it is used for.
2. What this website does
albujon.es does not use analytics, audience measurement, personalisation or advertising cookies. Nor does it include social media buttons, embedded videos, embedded maps, typefaces served from third parties or any other element that installs identifiers in the browser.
The site is static: the pages are served as they are, the images and the typefaces are hosted on the domain itself and the only code that runs is a file of our own that handles navigation, animations and form validation. That code does not write cookies and does not use the browser's local storage or session storage.
As a result, the company does not collect information about the browsing habits of those who visit the site, either directly or through third parties.
3. Why there is no cookie notice
Article 22(2) of Ley 34/2002, de 11 de julio, de servicios de la sociedad de la información y de comercio electrónico (LSSI-CE, the Spanish act on information society services and electronic commerce) requires the informed consent of the user in order to use data storage and retrieval devices on their terminal. That same provision exempts from consent those cookies whose sole purpose is to “carry out the transmission of a communication over an electronic communications network” or which are “strictly necessary for the provision of an information society service expressly requested by the user”.
The guidance on the use of cookies issued by the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency) develops that exemption and includes within it, among others, security cookies and those that ensure load balancing and the delivery of the requested content.
Since this site can only install cookies falling within that exemption, no cookie notice is displayed and no consent is requested: doing so for exempt cookies would create confusion about what is actually being processed. All of them are reported here in any case, in compliance with the transparency duty of Articles 12 and 13 of Reglamento (UE) 2016/679 (GDPR).
Should any non-exempt cookie be added in future — analytics, personalisation or advertising — a consent mechanism in line with the Agency's guidance would be put in place beforehand and this policy would be updated before it came into operation.
4. Technical cookies that may be installed
The site is served through the infrastructure of Cloudflare, Inc., which acts as hosting provider, content delivery network and protection against attacks. When those protections are enabled, Cloudflare may install in the browser the cookies set out below. They are technical cookies: they do not identify the person, they are not used for analytics or advertising purposes and they are not shared with third parties for other uses.
For the purposes of the Agencia Española de Protección de Datos guidance they are treated as first-party cookies, because the provider installs them on behalf of the site owner and following its instructions, in its capacity as processor.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| __cf_bm | Cloudflare, Inc. | To distinguish traffic generated by people from traffic generated by robots, so that protection against abusive automation can work. Its content is an encrypted calculation, not an identifier of the person. | 30 minutes from the last activity | Technical or necessary. First-party, managed by the hosting and security provider |
| cf_clearance | Cloudflare, Inc. | To store proof that the browser has passed a security challenge, so that it is not repeated on every page. It is installed only if the visitor is actually put through a challenge. | As set by the security configuration of the domain | Technical or necessary. First-party, managed by the hosting and security provider |
| _cfuvid | Cloudflare, Inc. | To tell apart visitors sharing the same IP address, so that rate-limiting rules are applied correctly. It is installed only if those rules are active. | Session: deleted when the browser is closed | Technical or necessary. First-party, managed by the hosting and security provider |
The table sets out the maximum scenario. On an ordinary visit, with no security challenges or rate-limiting rules triggered, it is common for no cookie at all to be installed.
5. Sending the contact form
The contact form is sent to the infrastructure of Web3Forms, a service operated by Web3Creative, which is likewise served through Cloudflare. That submission goes to a domain other than albujon.es, so any cookie the provider may install in that exchange is associated with its own domain and not with that of this website.
Those cookies are likewise technical in nature and relate to the protection of the point where submissions are received. The processing of the personal data sent through the form is described in the privacy policy.
6. How to check, block or delete cookies
Every browser allows stored cookies to be inspected and deleted, and blocking to be configured, either generally or site by site. They also usually offer a private browsing mode that discards cookies when the window is closed. These are the instructions for the main browsers:
To check for yourself what is described on this page, you can open the browser's developer tools, usually with the F12 key, and look at the storage section while browsing the site.
7. What happens if they are blocked
The content of albujon.es reads perfectly well with cookies blocked: no function of the site depends on them. A complete block may, however, mean that the hosting provider's protections repeat the security challenge on every page, or that the form submission is rejected by the anti-automation filters. In that case, there is always the option of writing directly to organizacionalbujon@gmail.com.
8. Changes to this policy
This policy may be updated when the services used, the applicable rules or the criteria of the supervisory authority change. The version in force is the one published at this address, and the date of the last update appears at the top of the page. It is advisable to consult it from time to time.
For any question about this policy you can write to organizacionalbujon@gmail.com. Further information in the legal notice and in the privacy policy.
This English version is provided for information only. In the event of any discrepancy, the Spanish version shall prevail.