Cookie policy
I make my living from advertising, so I use analytics and the Meta pixel and I am not going to pretend otherwise. What I do is load nothing at all from them until you press Accept, keep the reject button at the same level, and tell you here exactly what gets stored in your browser. Including the parts that are not cookies.
Last updated: August 2026 · Version 2.0
1. What this policy covers
It explains what is stored on or read from your device when you visit ecom-olimpo.com, who stores it, what it is for, how long it lasts and how to change your decision. The controller is ECOM OLIMPO - FZCO, IFZA Business Park, DDP, Dubai, United Arab Emirates, info@ecom-olimpo.com.
We say "cookies" out of habit, but the legal regime — article 22(2) of Spanish Law 34/2002 and data protection law — is the same for any technology that stores or retrieves information on your device: cookies, tracking pixels, browser local storage (localStorage) and session storage (sessionStorage).
That distinction matters here, which is why we put it up front: the strictly necessary items on this site are not cookies, they are browser local storage entries. That changes where you have to look if you want to delete them; it changes nothing about your rights or our obligations.
2. How consent works here
- The first time you arrive you see a notice with two buttons at the same visual level: Reject and Accept.
- Until you press Accept, no measurement is loaded at all. Neither Google Analytics nor the Meta pixel: not a single request goes out to
googletagmanager.comorconnect.facebook.net, and none of their cookies is written. - Rejecting is as easy as accepting and closes off no content: there is no cookie wall here.
- Today the decision is a single one covering both categories. Accept switches on analytics and advertising together; Reject blocks both. There is not yet a panel to accept one and reject the other, and we are not going to describe one that has not been built. If we build it, it will be described here and you will be asked again.
- Your decision is stored in your own browser, in local storage, together with the date you made it. It is not sent to our server, and we keep no copy of it: the record of what you chose, and when, lives in your browser and nowhere else.
- Because it lives in your browser, the decision is per device and per browser: if you come back from another one, browse in private mode or clear the site data, you will be asked again. And today it does not expire on its own: it lasts until you change it or clear the site data. The Spanish DPA's cookie guidance is to ask again periodically, at most every 24 months; that renewal is not built yet, so in the meantime the way to revisit your decision whenever you like is the link in section 5.1.
You do not have to take our word for it. Open your browser's network tab before and after you decide, and look at which requests go out and where to.
3. What is stored, exactly
3.1. Strictly necessary: always on, and not cookies
These make it possible to deliver the service you asked for and to keep your own decision. They are exempt from consent under article 22(2) of Spanish Law 34/2002. They cannot be switched off from the notice, but you can delete them from your browser whenever you like.
| Name | Where it is stored | Provider | Purpose | Duration |
|---|---|---|---|---|
| eo_consentimiento | Browser local storage (not a cookie) | ecom-olimpo.com (first party) | Stores whether you accepted or rejected analytics and advertising, plus the date, so you are not asked again on every page | Until you withdraw it or clear the site data. It does not expire automatically today |
| eo_idioma | Browser local storage (not a cookie) | ecom-olimpo.com (first party) | Remembers which language version you want, whether you chose it in the ES/EN switcher or it was detected on your first visit | Until you clear the site data |
| eo_geo_desde | Browser session storage (not a cookie) | ecom-olimpo.com (first party) | Briefly stores the address you were redirected from, so we can offer to take you back to it | Deleted as soon as it is read, and in any case when you close the tab |
Deleting them breaks nothing: you will simply be asked about cookies again and your language preference will be lost.
This site sets no first-party cookies at all. No session cookie, no security cookie, no cart cookie. None.
3.2. Analytics: off by default
These tell us how many people come in, where from, which pages they read and where they drop off. Without them we work blind on our own website. We use Google Analytics 4, measurement ID G-4KG6W93V03. It is only activated if you accept.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google (Google Analytics 4) | Distinguishes browsers by assigning a random identifier, in order to count unique visitors | 2 years (Google's default; we have not changed it) |
| _ga_4KG6W93V03 | Google (Google Analytics 4) | Maintains the session state for our property G-4KG6W93V03 | 2 years (Google's default; we have not changed it) |
They are written by Google's script on our own domain, so technically they are first-party cookies, but the recipient of the data is Google: the script is downloaded from googletagmanager.com and the measurement is sent to Google's servers. How Google processes the IP address is defined by Google, not by us: policies.google.com/technologies/partner-sites.
If you submit the diagnostic form with analytics accepted, a generate_lead event is also recorded. If you rejected them, nothing is recorded, because Google Analytics is not even loaded.
That is everything this website sends: the page views, and that event if you fill in the form. What Google then does with the data inside its own systems is defined by Google, in the terms and the privacy policy linked above. If you would rather none of it happened, reject in the notice, or use the Google options in section 5.3.
3.3. Advertising: off by default
These let us know which ad brought you here, measure whether a campaign converts and show you our advertising again on Facebook and Instagram. We use the Meta pixel, ID 1439340606651461. It is only activated if you accept.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta | Identifies the browser in order to attribute conversions to our ads and build remarketing audiences | 90 days (Meta's default) |
| _fbc | Meta | Stores the click identifier (fbclid) you arrived with from an ad, so the conversion is attributed correctly. It is only created if you arrive from an ad | 90 days (Meta's default) |
Same as with Google: the script is downloaded from connect.facebook.net, both cookies are written by that script on our domain, and the data is sent to Meta. If you submit the form with advertising accepted, the pixel also records a Lead event.
Those two events are everything the pixel sends from here: a PageView when the page loads and, if you fill in the form, the Lead event — always after you have accepted, never before. What Meta then does with that data inside its own systems, and what it may combine it with, is defined by Meta in its data policy, which you can read at facebook.com/privacy/policy; the advertising you are shown is controlled from your own account settings.
3.4. What is not here, and is worth knowing is not here
- We do not send events to Meta from the server. The Conversions API is not implemented on this website. The only thing that reaches Meta is sent by the pixel from your browser, and only if you accept.
- We load no third-party fonts or scripts when the page opens. Fonts are served from our own domain, so simply opening this site does not disclose your IP address to Google or anyone else.
- There are no embedded videos, maps, chats, external forms or social buttons.
- We use no fingerprinting techniques and no third-party advertising cookies other than the two described above.
- We do not sell or share your browsing data with brokers or data networks.
4. Country detection uses no cookies
This site takes you to the version in your language, which is the one carrying your market's pricing. To do that, on your first visit, the server looks at your IP address and resolves it against a range file that lives on the server itself.
- Your IP address is not sent to any third party. We call no external geolocation API: doing so would mean disclosing personal data to another company, and it is not necessary.
- Your IP address is not stored. It is used within that same request and discarded. The response contains only market and language.
- No cookie is set for this. The result is saved as your language preference in local storage (
eo_idioma), the entry described in section 3.1. - It only runs on a first visit and never on search engines. If you use the ES/EN switcher, your choice always wins. And you can disable detection by adding
?nogeoto any address.
The database used is IP Geolocation by DB-IP, published under a Creative Commons Attribution 4.0 (CC BY 4.0) licence.
5. How to change or withdraw your consent
5.1. From this page
Change my cookie decision — this deletes the decision stored in your browser and reloads the page so the notice asks you again.
And now the part almost no policy tells you: if you had accepted, from that moment we stop loading Google Analytics and the pixel, but the cookies Google and Meta already left in your browser (_ga, _ga_4KG6W93V03, _fbp, _fbc) stay there until they expire or you delete them. We cannot delete them from here and we are not going to claim otherwise. To remove them for real, use the next section.
5.2. From your browser
This is the route that deletes everything, the strictly necessary items included. Bear in mind that you will then be asked about cookies again and your language preference will be lost.
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
In all of them, clearing the "site data" for ecom-olimpo.com removes the Google and Meta cookies and the three local storage entries in section 3.1 at the same time.
5.3. Directly with Google and Meta
- Google Analytics: opt-out add-on at tools.google.com/dlpage/gaoptout
- Google advertising: myadcenter.google.com
- Meta: ad preferences inside your Facebook or Instagram account
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6. International transfers
If you accept, Google and Meta receive data about your browsing and may process it in the United States. Both groups appear on the EU-US Data Privacy Framework list, which you can check at dataprivacyframework.gov.
Which company within each group receives that data, and therefore which of its safeguards applies, depends on the terms under which each account was signed up. If it matters to you, ask us at info@ecom-olimpo.com and we will tell you what our accounts show and which terms apply to them. What leaves this website is only what section 3 describes, and only if you accept.
In addition, the data we collect ourselves is processed from the United Arab Emirates, a country with no adequacy decision from the European Commission. The detail, with the safeguards applied, is in the Privacy policy.
7. Changes to this policy
If we add, change or remove any of these technologies, we update these tables. Where the change affects categories subject to consent, we ask you again. The version in force is the one published here, with its date at the top.
8. Contact
Any questions about cookies or about what is stored in your browser: info@ecom-olimpo.com.