Legal document
Cookie Policy
Last updated: May 16, 2026
1. What are cookies?
A cookie is a small text file that a website saves on your browser when you visit it. Cookies allow the website to remember your actions and preferences (such as login, language, or font size) over a period of time, so you don't have to keep re-entering them whenever you visit the site or navigate from one page to another.
In accordance with the EU ePrivacy Directive (2009/136/EC) and the General Data Protection Regulation (GDPR) 2016/679, <company/> informs you about the use of cookies on the ResenasYa platform.
2. Types of cookies we use
2.1 Strictly necessary cookies
These are essential for the platform to function. Without them, services such as authentication or session security would not be possible. They do not require prior consent under applicable regulations and cannot be deactivated.
| Name | Provider | Purpose | Type | Duration | Consent | Status |
|---|---|---|---|---|---|---|
| sb-access-token | Supabase | Management of the user's authenticated session on the platform. | First party | Session / 1 hour | Not required | Active |
| sb-refresh-token | Supabase | Automatic renewal of the user session. | First party | 30 days | Not required | Active |
| __Host-next-auth.csrf-token | Next.js | Protection against CSRF attacks (Cross-Site Request Forgery). | First party | Session | Not required | Active |
| ry_cookie_consent | ResenasYa (localStorage) | Stores your cookie consent preferences so you don't have to set them on every visit. | First party (localStorage) | Until the policy is updated | Not required | Active |
| resenas_ya_country | ResenasYa (localStorage) | Remembers the country prefix selected in the phone number selector. | First party (localStorage) | Persistent until manually cleared | Not required | Active |
| __gb_oauth_state | ResenasYa | CSRF protection during the Google Business OAuth flow. Automatically deleted after authentication is complete. | First party | 10 minutes (session) | Not required | Active |
2.2 Analytical cookies
They help us understand how the platform is used so we can improve it. Data is processed in an aggregate and anonymous manner. They are only activated with your express consent.
These cookies are not currently active. They will be activated in a future platform update, at which point you will be informed via the consent banner.
| Name | Provider | Purpose | Type | Duration | Consent | Status |
|---|---|---|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Anonymously measures browsing behaviour to improve the user experience. | Third party | 2 years | Required | Pending |
| va_* | Vercel Analytics | Web performance analytics without cross-site tracking cookies. | First party | Session | Required | Pending |
2.3 Marketing and social media cookies
They allow relevant advertising to be displayed and campaign performance to be measured on social platforms. They are only activated with your express consent.
These cookies are not currently active. They will be activated in a future update.
| Name | Provider | Purpose | Type | Duration | Consent | Status |
|---|---|---|---|---|---|---|
| _fbp, _fbc | Meta Pixel (Facebook / Instagram) | Conversion tracking and remarketing on Meta platforms. | Third party | 90 days | Required | Pending |
| li_sugr, bcookie | LinkedIn Insight Tag | Conversions and audiences on LinkedIn. | Third party | 6 months – 2 years | Required | Pending |
| _gcl_au, _gcl_aw | Google Ads | Measuring conversion performance for Google campaigns. | Third party | 90 days | Required | Pending |
3. Third-party services without browser cookies
The following services are part of our platform but operate exclusively on the server and do not install cookies in your browser:
- Twilio WhatsApp Business — Sending and receiving WhatsApp messages to customers.
- Anthropic Claude — AI-powered sentiment analysis of customer responses.
- Supabase PostgreSQL — Database. Session credentials are managed via the first-party cookies described above.
If you access external links on the platform (such as your Google Maps profile), the destination sites may set their own cookies according to their policies. <company/> does not control or take responsibility for such cookies.
4. Legal basis for cookie use
- Technical necessity / legitimate interest: Strictly necessary cookies for the service to function (authentication, security) do not require prior consent.
- Express consent (Article 6.1.a GDPR): Analytical and marketing cookies require your prior, free, informed, and specific consent. You can withdraw your consent at any time from the preferences panel.
5. How to manage your preferences
You can review or change your preferences at any time using the button at the top of this page or from the platform footer.
You can also manage, block, or delete cookies through your browser settings. Please note that disabling necessary cookies may prevent the platform from functioning correctly.
6. Updates to this policy
<company/> may update this Cookie Policy when necessary, for example when incorporating new features that require the use of additional cookies or when contracting new services. Substantial updates will be communicated via the consent banner and, where appropriate, by email.
For any queries about cookies or privacy, contact us at: info@resenasya.com