Cookie policy

This policy explains the cookies and similar technologies used by hitsfy.

1. What cookies are

Cookies are small browser files. Some are essential for navigation and security; preference, measurement or marketing technologies are only activated where appropriate consent exists.

2. Necessary cookies

• hitsfy/Laravel session, for authentication, navigation and security, for the session;
• XSRF-TOKEN, to protect forms, for the session;
• hitsfy_cookie_consent_v1, to remember choices, for up to 6 months;
• technical language or explicitly requested preference cookies;
• Cloudflare Turnstile security cookies on protected screens where the anti-abuse check is enabled.

3. Optional categories

Preferences remember optional settings. Analytics measure aggregate usage. Marketing measures campaigns or personalises promotional communications. These remain disabled until valid consent.

At the date of this update, hitsfy does not load analytics or advertising cookies. The system is designed to prevent those categories from loading before a choice if they are added later.

4. Choice and withdrawal

The first notice lets you accept all, reject non-essential cookies, or customise by purpose. Rejecting is as easy as accepting. Change or withdraw your choice at any time through Cookie preferences in the footer. Rejection does not disable essential functions.

5. Third parties and browsers

When you follow a link to an external platform or payment system, that provider may use cookies on its own domain under its policy. You can also delete or block cookies in your browser; blocking necessary cookies may prevent login, forms or payments.

We ask again after expiry, a material change, or deletion of the consent cookie. For questions use Support. Controller: Mantovani Europe S.L., Spain.