1. What are cookies?
Cookies (and equivalent technical storage, such as localStorage) are small files a site saves on your device when you visit it, to remember information across pages or visits. Some are essential for the site to work; others require your prior consent under article 22.2 of Spain's Information Society Services Act (LSSI) and the Spanish Data Protection Agency's Cookie Guide (AEPD, 2023).
2. Cookies on this site
| Name | Who sets it | Purpose | Type | Duration | Exempt or consent |
|---|---|---|---|---|---|
| NEXT_LOCALE | This site | Remember the language you chose | Technical | 1 year | Exempt (necessary) |
| aymar_cookie_consent | This site | Remember your cookie choice (accept, reject or configure) | Technical | 12 months | Exempt (necessary) |
| aymar_widget_visitor_id | Demo widget, only if you accept "embedded" or click "Try the assistant" | Identify your conversation with the demo assistant | Functional | 365 days | Consent, or an explicit click on "Try it" |
| Contact form submission | Formspree (server-side; no script loads in your browser) | Deliver your request to our sales team | Server-side, no client cookie | — | Not applicable |
3. Audience measurement
We may use our own self-hosted analytics tool (Umami) to see which pages get the most visits. It is OFF today: until we turn it on, this site performs no measurement at all. Once active, it will still set no cookies or personal identifiers, will only ever talk to our own self-hosted origin (never a third party), and will respect the browser's Do Not Track preference — conditions that, under the AEPD's 2024 Audience Measurement Guide, exempt it from the prior-consent duty in LSSI article 22.2.
4. Platform cookies (app.aymaragents.com and the partner console)
| Name | Who sets it | Purpose | Type | Duration | Exempt or consent |
|---|---|---|---|---|---|
| aymar_session | Platform | Keep you signed in | Technical, httpOnly | Session | Exempt (necessary) |
| csrf_token | Platform and partner console | Protect forms against cross-site request forgery (CSRF) | Technical | Session | Exempt (necessary) |
| access_token | Platform, when signing in with Google | Keep your authenticated access | Technical, httpOnly | Session | Exempt (necessary) |
| aymar_impersonation | Platform, exceptional internal support | Record and scope a temporary, audited support access to your account | Technical, httpOnly, very short-lived | Minutes | Exempt (necessary) |
| partner_access_token / partner_refresh_token | Partner console | Keep you signed in and renew your session | Technical, httpOnly | Session / renewal | Exempt (necessary) |
| aymar_theme | Platform and partner console | Remember whether you prefer light or dark mode | Technical | Persistent | Exempt (necessary) |
| NEXT_LOCALE | Platform and partner console | Remember the interface language | Technical | 1 year | Exempt (necessary) |
| localStorage aymar:assistant-panel:* | Platform | Remember your "Assistant" panel preferences | Technical storage | Persistent in your browser | Exempt (necessary) |
| __stripe_mid / __stripe_sid | Stripe Connect, only on the partner's billing page | Process the payment you requested | Technical, from our payment provider | Per Stripe | Exempt (strictly necessary for the requested payment) |
| Registration anti-bot check | Our own server (ALTCHA, self-hosted, no cookies); still being replaced today by Google reCAPTCHA v3 | Prevent automated sign-ups | — | — | ALTCHA: no cookies. reCAPTCHA (being replaced): subject to Google's own policy |
When you access the platform or the partner console as a customer, a customer's staff, or our own team, the following cookies and storage are used, all of them technical and necessary for the service to work. None is used for advertising or profiling, so none requires a consent banner.
5. Widget on our customers' websites
When one of our customers installs the chat widget on their own website, it sets a single technical cookie, aymar_widget_visitor_id (365 days), and only once the chat is opened — never on page load. It identifies your conversation with that customer's digital worker, not with Aymar. Every customer must disclose this cookie in their own cookie policy; we give them the exact line to copy in our customer documentation.
6. Managing or withdrawing your consent
You can change your choice at any time from the "Cookie preferences" button in this page's footer, or delete/block cookies from your browser settings. Blocking a technical cookie may stop us remembering your preference (language, cookie choice), but it never stops you reading the site.