Cookie policy

1. What cookies are

Cookies are small files that a website stores on your device. The browser's local storage serves a similar purpose. Article 22.2 of the Spanish LSSI-CE requires us to inform you of their use and, unless they are strictly necessary to provide the service you have requested, to obtain your consent.

2. Cookies and storage we use

• nextanalyzer-web.session (first-party, technical cookie): keeps you signed in to the dashboard. It is encrypted, server-only (HttpOnly), secure (Secure) and SameSite=Lax, and expires when the session ends (thirty days at most) or when you sign out.
• nextanalyzer-web.challenge (first-party, technical cookie): stores for five minutes the intermediate step of signing in with a second factor. It is needed to complete sign-in.
• NEXT_LOCALE (first-party, preference cookie): remembers the language you chose. It lasts for the browser session.
• currency (first-party, preference cookie, public website only): remembers the currency you choose in the pricing selector. It is only set if you choose one and lasts one year.
• theme (local storage, preference): remembers whether you prefer light, dark or system mode.
• na.scripts.view and na.scripts.help (local storage, preference, dashboard only): remember how you prefer to view the script library and whether you show its help.

The NextAnalyzer staff back office uses its own technical session cookies (nextanalyzer-admin.session and nextanalyzer-admin.challenge) on its own domain; they are not set when you visit the public website or the dashboard.

3. Why we do not ask for consent

All of the above is strictly necessary to provide the requested service or serves to remember a preference you choose, so it is exempt from the consent requirement (article 22.2 of the LSSI-CE and the cookie guidance of the Spanish Data Protection Agency). That is why you will not see a cookie banner.

The desktop agent also stores on the device what it needs to work (the device credential, its policy, the queue of pending uploads and, if the history is on, the data of the last few minutes before sending it). It is installed by the organisation that owns the device, which is the one requesting the service, so that storage is strictly necessary; informing the person using the device is the organisation's responsibility.

We do not use analytics, advertising, tracking or third-party cookies. We do not load fonts, scripts or images from third-party servers: fonts and images are served from the site itself. The payment gateway only sets its own cookies on its pages, when you go to pay, under its own policy.

4. How to manage them

You can delete or block cookies in your browser settings. If you block technical cookies, you will not be able to sign in. To delete preferences saved in local storage, clear the site data in your browser.

5. If this changes

If we ever add cookies that are not necessary, we will state it here and ask for your consent beforehand, which you could withdraw as easily as you gave it.